# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-1
changelog:
  - Bump version to 2.5.2-1
  - Resolves: RHEL-5108 - ns-slapd crash in referint_get_config
  - Resolves: RHEL-5113 - nsslapd-numlisteners limit is not enforced
  - Resolves: RHEL-5115 - `dscreate ds-root` accepts relative path
  - Resolves: RHEL-5131 - ldif2db can be very slow
  - Resolves: RHEL-5138 - Logconv.pl CSV file contains mismatched header and data columns
  - Resolves: RHEL-14760 - ns-slapd crash in vlvIndex_delete
  - Resolves: RHEL-17511 - nsslapd-idletimeout is ignored
  - Resolves: RHEL-49454 - perf search result investigation for many large static groups and members
  - Resolves: RHEL-49458 - subsuffix are not returned in one level scoped search


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-2
changelog:
  - Bump version to 2.5.2-2
  - Resolves: RHEL-55744 - ipahealthcheck.ds.backends.BackendsCheck.DSBLE0006: BDB is deprecated and should not be used as a backend


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Resolves: RHEL-5151 - [RFE] defer memberof nested updates
  - Resolves: RHEL-54148 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to.
  - Resolves: RHEL-60135 - deadlock during cleanAllRuv
  - Resolves: RHEL-61341 - After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-61349 - Remove deprecated setting for HR time stamps in logs
  - Resolves: RHEL-62875 - Passwords are not being updated to use the configured storage scheme ( nsslapd-enable-upgrade-hash is enabled ).
  - Resolves: RHEL-64438 - VLV errors with RSNv3 and pruning enabled [rhel-9]
  - Resolves: RHEL-64854 - cleanallruv consums CPU and is slow
  - Resolves: RHEL-65506 - AddressSanitizer: double-free
  - Resolves: RHEL-65512 - AddressSanitizer: heap-use-after-free in import_abort_all
  - Resolves: RHEL-65561 - LeakSanitizer: detected memory leaks in dbmdb_public_db_op
  - Resolves: RHEL-65662 - Replication issue between masters using cert based authentication
  - Resolves: RHEL-65664 - LDAP unprotected search query during certificate based authentication
  - Resolves: RHEL-65665 - Ambiguous warning about SELinux in dscreate for non-root user
  - Resolves: RHEL-65741 - LeakSanitizer: memory leak in ldbm_entryrdn.c
  - Resolves: RHEL-65776 - Wrong set of entries returned for some search filters [rhel-9]
  - Resolves: RHEL-67004 - "dsconf config replace" should handle multivalued attributes.
  - Resolves: RHEL-67005 - Online backup hangs sporadically.
  - Resolves: RHEL-67008 - Some replication status data are reset upon a restart.
  - Resolves: RHEL-67020 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index
  - Resolves: RHEL-67024 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart.
  - Resolves: RHEL-69806 - ipahealthcheck.ds.replication displays WARNING '1 conflict entries found under the replication suffix'
  - Resolves: RHEL-69826 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9]
  - Resolves: RHEL-70127 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9]
  - Resolves: RHEL-70252 - Freelist ordering causes high wtime
  - Resolves: RHEL-71218 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-9]
  - Resolves: RHEL-74153 - backup/restore broken [rhel-9]
  - Resolves: RHEL-74158 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9]
  - Resolves: RHEL-74163 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set [rhel-9]
  - Resolves: RHEL-74168 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9]
  - Resolves: RHEL-74174 - Replication broken after backup restore with freeipa configuration [rhel-9]
  - Resolves: RHEL-74353 - nsslapd-haproxy-trusted-ip is not in schema [rhel-9]
  - Resolves: RHEL-76019 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.51.6-1
changelog:
  - Update to 1.51.6 (dev)
  - Honor the routing-rules property for VPN connections (RHEL-69899)
  - Fix potential crash when ipv4.dhcp-send-release is enabled (RHEL-67918)
  - Support encrypted DNS servers (RHEL-66260)
  - Fix configuration of VLAN ingress/egress QoS mapping (RHEL-72475)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.51.7-1
changelog:
  - Update to 1.51.7 (dev)
  - Add support in initramfs generator for parsing NM eDNS configuration (RHEL-70420)
  - Add new dnsconfd DNS backend (RHEL-67917)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.7-2
changelog:
  - Remove the build argument -flto-partition to avoid compilation crashes due
    to high memory usage.


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-2
changelog:
  - Support point-to-point IPSec tunnel (RHEL-20690)
  - Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
  - Support configuring IPSec mode with 'type' (RHEL-21554)


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Jaroslav Kysela <perex@perex.cz> - 2.2.5-2
changelog:
  - add sof-rpl-rt711-l0-rt1316-l12-rt714-l3.tplg for Dell SKU 0BDA
  - add xz compression support (with CRC32)


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
changelog:
  - security: require pykickstart version with %certificates support (rvykydal)
    Resolves: RHEL-61430
  - security: do not crash initramfs ks parsing on failing certificate dump
    (rvykydal)
    Resolves: RHEL-61430
  - security: add service to transfer certificates from initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates in initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates in pre-install phase only for dnf payload
    (rvykydal)
    Resolves: RHEL-61430
  - security: raise exception if certificate destination is unknown (rvykydal)
    Resolves: RHEL-61430
  - security: log a warning when dumping certificate over an existing file
    (rvykydal)
    Resolves: RHEL-61430
  - security: pre-install certificates before payload installation (rvykydal)
    Resolves: RHEL-61430
  - security: add API to install certificates early before payload (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates on target system (rvykydal)
    Resolves: RHEL-61430
  - security: Add API for installation on target system (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates early after Anaconda start (rvykydal)
    Resolves: RHEL-61430
  - security: add API to import certificates to Anaconda environment (rvykydal)
    Resolves: RHEL-61430
  - security: add API: Certificate getter (rvykydal)
    Resolves: RHEL-61430
  - kickstart: extend section specification for list of section data (rvykydal)
  - security: implement the support to install certificates to Anaconda
    (rvykydal)
    Resolves: RHEL-61430
  - translations: bump dependency to l10n repo because of branch switch
    (k.koukiou)
  - util: correct errors and suppress stderr for common cases (riehecky)
  - util: Add additional information for EFI systems (riehecky)
    Resolves: RHEL-55128


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.15-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77155
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77155
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71824
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71824


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.16-1
changelog:
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79803
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79804


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.17-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80303
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80023
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80233
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80023


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.1-1
changelog:
  - network: disable NM autoconnections also when BOOTIF is used (rvykydal)
    Resolves: RHEL-78272
  - network: support inst.net.noautodefault option (rvykydal)
    Related: RHEL-78272
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83214
  - Support leavebootorder for bootupd (jkonecny)
    Resolves: RHEL-40897
  - bootupd: call bootupctl with --update-firmware (awilliam)
    Resolves: RHEL-40897


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.2-1
changelog:
  - Fix typo in systemd service (jstodola)
    Resolves: RHEL-78272
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: INSTALLER-4148
    Resolves: RHEL-21691
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-82694
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-82694


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Nick Clifton <nickc@redhat.com> - 12.83-1
changelog:
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.
  - Clang & LLVM Plugins: Include install directory in binary.  (RHEL-54069)
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-529


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Fail on RHEL or CentOS 10 because it's not supported
    Resolves: RHEL-67804
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-67807
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68374
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69311


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204510)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.7-1
changelog:
  - ansible-core 2.14.7 release (rhbz#2221820)
  - rebuild with python 3.9 (rhbz#2221820)
  - remove bundled packaging, pyparsing and resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.9-1
changelog:
  - ansible-core 2.14.9 release (rhbz#2232432)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13744
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4962
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13758
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17954
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17957
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-19123
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19130
  - Idempotency fixes
    Resolves: RHEL-19132
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19134
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19136


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Resolves: RHEL-35565
  - New inventory plugin
    Resolves: RHEL-35541
  - Enable batch command as backend
    Resolves: RHEL-38943
  - New collection sub package
    Resolves: RHEL-38931


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-22
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-55
changelog:
  - Add linker error/warning messages for executable stacks and RWX segments.  (RHEL-59801, RHEL-59802)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-18
changelog:
  - Add a basic read-only support for UDF filesystem
    Resolves: RHEL-13329
  - nvme: Skip startup/write when NVMe plugin isn't available
    Resolves: RHEL-28124


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-25
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74078
  - Include additional information in PartitioningError
    Resolves: RHEL-8005


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-26
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-8008
    Resolves: RHEL-8012


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.17.0-1
changelog:
  - Rebase on bpftrace 0.17.0 (RHEL-286)
  - Fix runqlat.bt, tcpdrop.bt, and undump.bt on aarch64 (rhbz#2170838)


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/c060201)
  - Related: RHEL-60277


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-19
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54686]
  - Resolves: RHEL-54686
    ([RHEL-9.5] cloud-init schema validation fails.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-20
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-61224]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-61224]
  - Resolves: RHEL-61224
    (Configuring metric for default gateway is not working)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122]
  - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122]
  - Resolves: RHEL-71122
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] )


author: Jon Maloy <jmaloy@redhat.com> - 24.4-4
changelog:
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361]
  - Resolves: RHEL-76361
    ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-5
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703]
  - Resolves: RHEL-81703
    (DataSourceNoCloudNet network configuration is ineffective - c9s)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-6
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658]
  - Resolves: RHEL-88658
    (Cloud-Init Backport Optimization Features on Alibaba Cloud)


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Allow editing multiple file permissions
  - Support uploading files with administrator privileges
  - Add drag 'n drop support


author: Bob Mader <bob@redhat.com> - 0.1.7-2
changelog:
  - Initial build for EL9
  - Applying changes for gating - adding the .fmf directory
  - Resolves: RHEL-57044


author: Packit <hello@packit.dev> - 332-1
changelog:
  - containers/ws: Include cockpit-files
  - login: Beibooting to all supported OSes
  - metrics: Show system boots in metrics


author: Packit <hello@packit.dev> - 336-1
changelog:
  - storage: Implement deletion of multi-device btrfs (rhbz#2352385)
  - storage: Use mdraid metadata version 1.0 when in Anaconda mode (rhbz#2352953)
  - Add a channel capabilities system


author: Packit <hello@packit.dev> - 336.1-1
changelog:
  - storage: Fix passphrase remembering with "Reuse encryption" (rhbz#2354497)
  - Translation updates (rhbz#2354986)


author: Packit <hello@packit.dev> - 336.2-1
changelog:
  - storage: Revert "Use mdraid metadata version 1.0 when in Anaconda mode" (rhbz#2352953)
  - Translation updates (rhbz#2354986)


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.230.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.230.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.231.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.231.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.232.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.232.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.233.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.233.0
  - Resolves: RHEL-58997


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 3:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Related: RHEL-80816


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Mark Wielaard <mjw@redhat.com> - 5.0-8
changelog:
  - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch
  - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-4
changelog:
  - edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081]
  - Resolves: RHEL-56081
    ([EDK2] Shim fallback reboot workaround might not work on SNP)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-5
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847]
  - Resolves: RHEL-45847
    ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-6
changelog:
  - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974]
  - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336]
  - Resolves: RHEL-56974
    (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9])
  - Resolves: RHEL-55336
    (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-7
changelog:
  - edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833]
  - Resolves: RHEL-56248
    (507x510 display resolution should not crash the firmware [edk2,rhel-9.6])
  - Resolves: RHEL-60833
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-8
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]
  - Resolves: RHEL-65725
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-3
changelog:
  - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865]
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019]
  - Resolves: RHEL-70865
    (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7])
  - Resolves: RHEL-83019
    (The newer revocation file and Server 2025 required to update it [rhel-9])


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-627
  - fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D')
  Resolves: RHEL-817
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-730
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-816


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-102
changelog:
  RHEL 9.7.0 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-63090
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-59626
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-21871
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-30020


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-81
changelog:
  - fence_ibm_powervs: add private endpoint and token file support
    Resolves: RHEL-62206
  - ha-cloud-support: bundle libs for the powervs-subnet resource agent
    Resolves: RHEL-64023


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-85
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76493


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-87
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83255


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-88
changelog:
  - fence_compute/fence_evacuate: dont use deprecated inspect.getargspec()
    Resolves: RHEL-84448
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79798


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Fixes: RHEL-64749


author: Eric Garver <egarver@redhat.com> - 1.3.4-6
changelog:
  - feat(IPv6_rpfilter): support loose rpfilter
  - feat(IPv6_rpfilter): support loose-forward rpfilter
  - feat(IPv6_rpfilter): support strict-forward rpfilter


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83109


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-12
changelog:
  - Resolves: RHEL-3541 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-9
changelog:
  - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
  - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-1.el9
changelog:
  - Rebase to gdb-14.2 and update all bug references
    (Resolves: RHEL-39554)
    (Resolves: RHEL-39553)
    (Resolves: RHEL-10550)
    (Resolves: RHEL-39555)
    (Resolves: RHEL-39585)
    (Resolves: RHEL-36211)


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Ray Strode <rstrode@redhat.com> - 40.1-23
changelog:
  - Make /var/log/gdm tmpfiles.d snippet match files manifest
    to fix installability test
    Related: RHEL-19410


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Joan Torres <joantolo@redhat.com> - 40.1.1-11
changelog:
  - Add race fixes needed when terminating a conflicting session
    on GDM greeter.
    Resolves: RHEL-92341


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Alejandro Sáez <asm@redhat.com> - 1.22.3-1
changelog:
  - Rebase to 1.22.3
  - Removes re-enable-cgo.patch
  - Resolves: RHEL-35634
  - Resolves: RHEL-35883
  - Resolves: RHEL-10068
  - Resolves: RHEL-34924


author: Archana Ravindar <aravinda@redhat.com> - 1.22.4-1
changelog:
  - Rebase to Go1.22.4 that includes fixes for CVE-2024-24789 and CVE-2024-24790
  - Resolves: RHEL-40156


author: David Benoit <dbenoit@redhat.com> - 1.22.5-2
changelog:
  - Rebuild race detector archives from LLVM sources
  - Add golang-race subpackage
  - Resolves: RHEL-33421
  - Remove unused crypto/internal/boring/syso package
  - Resolves: RHEL-54335


author: Archana <aravinda@redhat.com> - 1.23.2-1
changelog:
  - Rebase to Go1.23.2
  - Remove fix standard crypto panic patch as the source already has changes
  - Resolves: RHEL-62392


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-2
changelog:
  - Fixes patch 1002 for update to golang-fips
  - Remove unused code under apsl-1.1 and apsl-1.2 licenses
  - Resolves RHEL-33655


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: saypaul <paul.sayan@gmail.com> - 0.15.5-1
changelog:
  - The 0.15.5 release
  - Auto-detect image type and use correct rollback
  - Support for read only /boot mount
  - Warn users of missing disabled healthchecks
  - Add feature to disable healthchecks


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.15.5-3
changelog:
  - Moved greenboot config to /etc/grub.d.
  - %post symlink greenboot.cfg to bootupd if present
  - %postun remove symlink from bootupd if present


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Antonio Murdaca <antoniomurdaca@gmail.com> - 0.15.8-1
changelog:
  * ci: add ci test for pull request by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/164
   * ci: add more wait time for fallback by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/167
   * ci: fix ansible check failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/169
   * ci: add test case of bootc anaconda iso by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/171
   * test github token by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/174
   * update github action by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/177
   * Update greenboot-ci.yaml by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/179
   * ci: fix iso case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/173
   * ci: add support for fedora rawhide by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/181
   * ci: fix rahide failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/183
   * ci: fix podman retry issue by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/185
   * ci: add centos-stream-9 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/187
   * ci: add rhel 9.6 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/190
   * ci: fix rhel 9.6 anaconda case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/193
   * ci: fix secret error by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/195
   * specfile: Stop building on ix86 by @travier in https://github.com/fedora-iot/greenboot/pull/197
   * rollback: if no bootc, fallback to rpm-ostree by @runcom in https://github.com/fedora-iot/greenboot/pull/199
   * fix:fail early for any required script failure by @say-paul in https://github.com/fedora-iot/greenboot/pull/198
   * Release 0.15.8 by @runcom in https://github.com/fedora-iot/greenboot/pull/202

   * @travier made their first contribution in https://github.com/fedora-iot/greenboot/pull/197

   **Full Changelog**: https://github.com/fedora-iot/greenboot/compare/v0.15.7...v0.15.8
  - Resolves: RHEL-78244


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.50.1-1
changelog:
  - Rebase to guestfs-tools 1.50.1
    resolves: rhbz#2168626
  - Fix virt-drivers inspection of RHEL 9.2 guests
    resolves: rhbz#2184963


author: Laszlo Ersek <lersek@redhat.com> - 1.50.1-3
changelog:
  - let virt-inspector recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable "make check"; we now use "-cpu max" (libguestfs 30f74f38bd6e)
    resolves: rhbz#2209280


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-4
changelog:
  - Add support for nbd+unix:// URIs
    resolves: RHEL-33956
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-36634


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56811
  - Replace Jansson with json-c
    resolves: RHEL-65294


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.4
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83036


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80816


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git
changelog:
  - hpvd-hypervkvpd.service-ordering-fixes.patch [bz#2103188]
  - Resolves: bz#2103188
    ([Hyper-V][RHEL-9] hypervkvpd.service service ordering)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.41.20190303git
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2122115]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [bz#2139457]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [bz#2139457]
  - Resolves: bz#2122115
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0)
  - Resolves: bz#2139457
    ([Hyper-V][RHEL9.2] Update Hyper-V-Daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.43.20190303git
changelog:
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902]
  - Resolves: RHEL-9902
    ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
changelog:
  - Re-sync with upstream changes adding ignition-grub subpackage
    and a few minor changes
  - New release


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-7
changelog:
  - Resolves: RHEL-70760 Fix typo in ipa-migrate log file i.e 'Privledges' to 'Privileges'
  - Resolves: RHEL-70481 ipa-server-upgrade fails after established trust with ad
  - Resolves: RHEL-69927 add support for python cryptography 44.0.0
  - Resolves: RHEL-69908 All user groups are not being included during HSM token validation
  - Resolves: RHEL-69900 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-8
changelog:
  - Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking [rhel-9]
  - Resolves: RHEL-71261 [RHEL-9.6] Include latest fixes in python3-ipatests package
  - Resolves: RHEL-67191 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal [rhel-9.6]
  - Resolves: RHEL-59040 KRA installation failure caused by a certificate mismatch in NSS DB and configuration file.


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-9
changelog:
  - Resolves: RHEL-74465 kinit with external idp user is failing
  - Resolves: RHEL-75656 Include latest fixes in python3-ipatests package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-10
changelog:
  - Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-11
changelog:
  - Resolves: RHEL-67913 Add DNS over TLS Support, Require bind9.18 32:9.18.29-2 and new bind-dyndb-ldap 11.11-1


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-14
changelog:
  - Resolves: RHEL-80345 Use new bind9.18-dyndb-ldap and bind9.18 only for DNS over TLS with the ipa-server-encrypted-dns package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-15
changelog:
  - Resolves: RHEL-84481 Protect all IPA service principals
  - Resolves: RHEL-84277 [RFE] IDM support UIDs up to 4,294,967,293
  - Resolves: RHEL-84276 Ipa client --raw --structured throws internal error
  - Resolves: RHEL-82707 Search size limit tooltip has Search time limit tooltip text
  - Resolves: RHEL-82089 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30658 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-88900 [RFE] Add check on CA cert expiry for ipa-cert-fix
  - Resolves: RHEL-88037 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86483 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-41178 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.9-0.1.ea
changelog:
  - Update to jdk-17.0.13+9 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+9-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 9
  - Set rpmrelease to 1
  - Set portablerelease to 1
  - Update sources to openjdk-17.0.13+9-ea.tar.xz
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.10-0.1.ea
changelog:
  - Update to jdk-17.0.13+10 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+10-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 10
  - Update sources to openjdk-17.0.13+10-ea.tar.xz
  - Related: RHEL-58785


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.10-0.2.ea
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Set rpmrelease to 2
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.11-2
changelog:
  - Update to jdk-17.0.13+11 (GA)
  - Update .gitignore to ignore openjdk-17.0.13+11.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 11
  - Set is_ga to 1
  - Update sources to openjdk-17.0.13+11.tar.xz
  - Resolves: RHEL-58785
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45355
  - Resolves: RHEL-47395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-2
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Related: RHEL-58797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.2.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58797
  - Resolves: RHEL-17191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74403


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73562


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-579.el9]
changelog:
  - selftest/mm: va_high_addr_switch: add ppc64 support check (Li Wang) [RHEL-85318]
  - selftests/mm: va_high_addr_switch: reduce test noise (Li Wang) [RHEL-85318]
  - redhat: spec: fix "unexpected argument to non-parametric macro" warnings (Augusto Caringi)
  - perf test: Parse 'perf stat' Topdown events for aarch64 (Anubhav Shelat) [RHEL-78426]
  - powerpc/pseries: make max polling consistent for longer H_CALLs (Mamatha Inamdar) [RHEL-79919]
  - Fix mmu notifiers for range-based invalidates (Charles Mirabile) [RHEL-83459]
  - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (Jared Kangas) [RHEL-84805] {CVE-2024-58068}
  - OPP: add index check to assert to avoid buffer overflow in _read_freq() (Jared Kangas) [RHEL-81432] {CVE-2024-57998}
  - OPP: Add dev_pm_opp_find_freq_exact_indexed() (Jared Kangas) [RHEL-81432]
  - s390/diag: Move diag.c to diag specific folder (Mete Durlu) [RHEL-72676]
  - s390/diag324: Retrieve power readings via diag 0x324 (Mete Durlu) [RHEL-72676]
  - s390/diag: Create misc device /dev/diag (Mete Durlu) [RHEL-72676]
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CKI Backport Bot) [RHEL-81064] {CVE-2024-54456}
  - mei: me: add panther lake P DID (David Arcari) [RHEL-79720]
  - block: fix adding folio to bio (Gavin Shan) [RHEL-79410]
  - x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally (David Arcari) [RHEL-53784]
  - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly (David Arcari) [RHEL-53784]
  - x86/itmt: Move the "sched_itmt_enabled" sysctl to debugfs (David Arcari) [RHEL-53784]
  - x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD (David Arcari) [RHEL-53784]
  - x86/itmt: Use guard() for itmt_update_mutex (David Arcari) [RHEL-53784]
  - x86/itmt: Convert "sysctl_sched_itmt_enabled" to boolean (David Arcari) [RHEL-53784]
  - perf tools: Fix build-id event recording (Michael Petlan) [RHEL-83537]
  - powerpc/rtas: avoid scheduling in rtas_os_term() (Mamatha Inamdar) [RHEL-81040]
  - ice: ensure periodic output start time is in the future (Petr Oros) [RHEL-29207]
  - ice: fix PHY Clock Recovery availability check (Petr Oros) [RHEL-29207]
  - ice: Drop auxbus use for PTP to finalize ice_adapter move (Petr Oros) [RHEL-29207]
  - ice: Use ice_adapter for PTP shared data instead of auxdev (Petr Oros) [RHEL-29207]
  - ice: Initial support for E825C hardware in ice_adapter (Petr Oros) [RHEL-29207]
  - ice: Add ice_get_ctrl_ptp() wrapper to simplify the code (Petr Oros) [RHEL-29207]
  - ice: Introduce ice_get_phy_model() wrapper (Petr Oros) [RHEL-29207]
  - ice: Enable 1PPS out from CGU for E825C products (Petr Oros) [RHEL-29207]
  - ice: Read SDP section from NVM for pin definitions (Petr Oros) [RHEL-29207]
  - ice: Disable shared pin on E810 on setfunc (Petr Oros) [RHEL-29207]
  - ice: Cache perout/extts requests and check flags (Petr Oros) [RHEL-29207]
  - ice: Align E810T GPIO to other products (Petr Oros) [RHEL-29207]
  - ice: Add SDPs support for E825C (Petr Oros) [RHEL-29207]
  - ice: Implement ice_ptp_pin_desc (Petr Oros) [RHEL-29207]
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CKI Backport Bot) [RHEL-82456] {CVE-2024-58069}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-580.el9]
changelog:
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CKI Backport Bot) [RHEL-80054] {CVE-2025-21702}
  - netfilter: nft_exthdr: fix offset with ipv4_find_option() (Florian Westphal) [RHEL-84577]
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Florian Westphal) [RHEL-84577]
  - netfilter: nf_tables: make destruction work queue pernet (Florian Westphal) [RHEL-84577]
  - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template. (Florian Westphal) [RHEL-84577]
  - netfilter: nft_flow_offload: update tcp state flags under lock (Florian Westphal) [RHEL-84577]
  - netfilter: nft_flow_offload: clear tcp MAXACK flag before moving to slowpath (Florian Westphal) [RHEL-84577]
  - bonding: fix incorrect MAC address setting to receive NS messages (Hangbin Liu) [RHEL-84574]
  - bonding: report duplicate MAC address in all situations (Hangbin Liu) [RHEL-84574]
  - bonding: delete always true device check (Hangbin Liu) [RHEL-84574]
  - bonding: add ns target multicast address to slave device (Hangbin Liu) [RHEL-84574]
  - bonding: Pass string literal as format argument of alloc_ordered_workqueue() (Hangbin Liu) [RHEL-84574]
  - scsi: lpfc: Fix spelling mistake 'Toplogy' -> 'Topology' (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Copyright updates for 14.4.0.8 patches (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update lpfc version to 14.4.0.8 (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Reduce log message generation during ELS ring clean up (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Copyright updates for 14.4.0.7 patches (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update lpfc version to 14.4.0.7 (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Add support for large fw object application layer reads (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update definition of firmware configuration mbox cmds (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (Dick Kennedy) [RHEL-82146]
  - selftests: net: local_termination: require mausezahn (Hangbin Liu) [RHEL-84591]
  - selftests: forwarding: add a pvid_change test to bridge_vlan_unaware (Hangbin Liu) [RHEL-84591]
  - selftests: tls: add a selftest for wrapping rec_seq (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Test TOS matching with input routes (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add negative connect tests (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add negative match tests (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Clarify test results (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Remove unused functions (Hangbin Liu) [RHEL-84591]
  - selftests: make order checking verbose in msg_zerocopy selftest (Hangbin Liu) [RHEL-84591]
  - selftests: fix OOM in msg_zerocopy selftest (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add VRF tests (Hangbin Liu) [RHEL-84591]
  - vxlan: check vxlan_vnigroup_init() return value (CKI Backport Bot) [RHEL-81516] {CVE-2025-21790}
  - media: mc: fix endpoint iteration (Kate Hsuan) [RHEL-77308]
  - media: fix secfeed undefined when filter alloc fail (Kate Hsuan) [RHEL-77308]
  - media: docs: Remove extraneous \endgroup from P010 table (Kate Hsuan) [RHEL-77308]
  - media: Fix building pdfdocs (Kate Hsuan) [RHEL-77308]
  - media: Documentation: mc: Replace deprecated graph walk API (Kate Hsuan) [RHEL-77308]
  - media: v4l2-mc: Mark v4l2_pipeline_link_notify() as deprecated (Kate Hsuan) [RHEL-77308]
  - media: videobuf2: Drop minimum allocation requirement of 2 buffers (Kate Hsuan) [RHEL-77308]
  - media: cec.h: Fix kerneldoc (Kate Hsuan) [RHEL-77308]
  - ipv6: use RCU protection in ip6_default_advmss() (Guillaume Nault) [RHEL-81568] {CVE-2025-21765}
  - net: add dev_net_rcu() helper (Guillaume Nault) [RHEL-81568] {CVE-2025-21765}
  - iomap: elide flush from partial eof zero range (Brian Foster) [RHEL-7901]
  - iomap: lift zeroed mapping handling into iomap_zero_range() (Brian Foster) [RHEL-7901]
  - iomap: reset per-iter state on non-error iter advances (Brian Foster) [RHEL-7901]
  - iomap: make zero range flush conditional on unwritten mappings (Brian Foster) [RHEL-7901]
  - iomap: fix handling of dirty folios over unwritten extents (Brian Foster) [RHEL-7901]
  - ima: Fix potential memory leak in ima_init_crypto() (CKI Backport Bot) [RHEL-80844] {CVE-2022-49627}
  - dm-crypt: Document integrity_key_size option. (Benjamin Marzinski) [RHEL-84906]
  - dm zoned: dynamically allocate the dm-zoned-meta shrinker (Benjamin Marzinski) [RHEL-84906]
  - dm: dynamically allocate the dm-bufio shrinker (Benjamin Marzinski) [RHEL-84906]
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: Do not emit journal configuration in DM table for Inline mode (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: Avoid divide by zero in table status in Inline mode (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: track tag_offset in convert_context (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: don't initialize cc_sector again (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: use bi_sector in bio when initialize integrity seed (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: fully initialize clone->bi_iter in crypt_alloc_buffer() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: set atomic as false when calling crypt_convert() in kworker (Benjamin Marzinski) [RHEL-84906]
  - dm-mirror: Support atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm-io: Warn on creating multiple atomic write bios for a region (Benjamin Marzinski) [RHEL-84906]
  - dm-stripe: Enable atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm-linear: Enable atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm: Ensure cloned bio is same length for atomic write (Benjamin Marzinski) [RHEL-84906]
  - dm-table: atomic writes support (Benjamin Marzinski) [RHEL-84906]
  - dm-transaction-manager: use red-black trees instead of linear lists (Benjamin Marzinski) [RHEL-84906]
  - dm: disable REQ_NOWAIT for flushes (Benjamin Marzinski) [RHEL-84906]
  - dm: remove useless test in alloc_multiple_bios (Benjamin Marzinski) [RHEL-84906]
  - dm: change kzalloc to kcalloc (Benjamin Marzinski) [RHEL-84906]
  - dm raid: fix spelling errors in raid_ctr() (Benjamin Marzinski) [RHEL-84906]
  - dm thin: make get_first_thin use rcu-safe list first function (Benjamin Marzinski) [RHEL-84906]
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-84906]
  - dm-verity FEC: Avoid copying RS parity bytes twice. (Benjamin Marzinski) [RHEL-84906]
  - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2) (Benjamin Marzinski) [RHEL-84906]
  - dm array: fix cursor index when skipping across block boundaries (Benjamin Marzinski) [RHEL-84906]
  - dm array: fix unreleased btree blocks on closing a faulty array cursor (Benjamin Marzinski) [RHEL-84906]
  - dm-verity: remove the unused "data_start" variable (Benjamin Marzinski) [RHEL-84906]
  - dm-bufio: use kmalloc to allocate power-of-two sized buffers (Benjamin Marzinski) [RHEL-84906]
  - dm thin: Add missing destroy_work_on_stack() (Benjamin Marzinski) [RHEL-84906]
  - dm: add support for get_unique_id (Benjamin Marzinski) [RHEL-84906]
  - dm: Fix typo in error message (Benjamin Marzinski) [RHEL-84906]
  - dm ioctl: rate limit a couple of ioctl based error messages (Benjamin Marzinski) [RHEL-84906]
  - dm: zoned: Remove unused functions (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused dm_table_bio_based (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused dm_set_md_type (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused functions in bio-prison-v1 (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused dm_cache_size (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused dm_cache_dump (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused btracker_nr_writebacks_queued (Benjamin Marzinski) [RHEL-84906]
  - dm-cache: fix warnings about duplicate slab caches (Benjamin Marzinski) [RHEL-84906]
  - dm-bufio: fix warnings about duplicate slab caches (Benjamin Marzinski) [RHEL-84906]
  - dm verity: fallback to platform keyring also if key in trusted keyring is rejected (Benjamin Marzinski) [RHEL-84906]
  - dm: fix spelling errors (Benjamin Marzinski) [RHEL-84906]
  - dm-cache: remove pointless error check (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Use common error handling code in crypt_set_keyring_key() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Use up_read() together with key_put() only once in crypt_set_keyring_key() (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: check mac_size against HASH_MAX_DIGESTSIZE in sb_mac() (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: support recalculation in the 'I' mode (Benjamin Marzinski) [RHEL-40616]
  - dm integrity: Convert comma to semicolon (Benjamin Marzinski) [RHEL-84906]
  - dm: Make use of __assign_bit() API (Benjamin Marzinski) [RHEL-84906]
  - dm integrity: Remove extra unlikely helper (Benjamin Marzinski) [RHEL-84906]
  - dm: Convert to use ERR_CAST() (Benjamin Marzinski) [RHEL-84906]
  - dm bufio: Remove NULL check of list_entry() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Allow to specify the integrity key size as option (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused declaration and empty definition "dm_zone_map_bio" (Benjamin Marzinski) [RHEL-84906]
  - dm delay: enhance kernel documentation (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused declaration dm_get_rq_mapinfo() (Benjamin Marzinski) [RHEL-84906]
  - platform/x86/intel/pmc: Remove unneeded extern keyword in header (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove unnecessary declarations in header (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Add Panther Lake support to intel_pmc_core (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Move arch specific action to init function (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Add Arrow Lake U/H support to intel_pmc_core driver (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove simple init functions (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Create generic_core_init() for all platforms (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove duplicate enum (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Make tgl_core_generic_init() static (David Arcari) [RHEL-20138]
  - net: fix NULL pointer dereference in l3mdev_l3_rcv (Davide Caratti) [RHEL-84583]
  - ipvlan: ensure network headers are in skb linear part (Davide Caratti) [RHEL-84583] {CVE-2025-21891}
  - vxlan: Fix uninit-value in vxlan_vnifilter_dump() (Guillaume Nault) [RHEL-84588]
  - redhat/configs: Enable CONFIG_PROVE_RAW_LOCK_NESTING for debug kernel (Waiman Long) [RHEL-80386]
  - locking/lockdep: Enforce PROVE_RAW_LOCK_NESTING only if ARCH_SUPPORTS_RT (Waiman Long) [RHEL-80386]
  - lockdep: Enable PROVE_RAW_LOCK_NESTING with PROVE_LOCKING. (Waiman Long) [RHEL-80386]
  - mpls: Handle error of rtnl_register_module(). (Guillaume Nault) [RHEL-85646]
  - ppp: Fix KMSAN uninit-value warning with bpf (Guillaume Nault) [RHEL-85638]
  - vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson) [RHEL-45755 RHEL-85593]
  - vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-85593]
  - mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-85593]
  - vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-85593]
  - vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-85593]
  - vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-85593]
  - vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-85593]
  - vfio/pci: match IGD devices in display controller class (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Add GB200 SKU to the devid table (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Check the HBM training and C2C link status (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem (Alex Williamson) [RHEL-85593]
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [RHEL-85593]
  - vfio/pci: Expose setup ROM at ROM bar when needed (Alex Williamson) [RHEL-85593]
  - vfio/pci: Remove shadow ROM specific code paths (Alex Williamson) [RHEL-85593]
  - vfio/pci: Remove #ifdef iowrite64 and #ifdef ioread64 (Alex Williamson) [RHEL-85593]
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Add a new GH200 SKU to the devid table (Alex Williamson) [RHEL-85593]
  - kvm/vfio: Constify struct kvm_device_ops (Alex Williamson) [RHEL-85593]
  - vfio/qat: fix overflow check in qat_vf_resume_write() (Alex Williamson) [RHEL-85593]
  - redhat/configs: Disable CONFIG_QAT_VFIO_PCI (Alex Williamson) [RHEL-85593]
  - vfio/qat: Add vfio_pci driver for Intel QAT SR-IOV VF devices (Alex Williamson) [RHEL-85593]
  - redhat/configs: disable CONFIG_DRM_WERROR (Eric Chanudet) [RHEL-82507]
  - Revert "nvme_core: scan namespaces asynchronously" (John Meneghini) [RHEL-84361]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-581.el9]
changelog:
  - selftests: livepatch: handle PRINTK_CALLER in check_result() (Denis Aleksandrov) [RHEL-85303]
  - livepatch: convert timeouts to secs_to_jiffies() (Denis Aleksandrov) [RHEL-85303]
  - selftests: livepatch: add test cases of stack_order sysfs interface (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Add stack_order sysfs attribute (Denis Aleksandrov) [RHEL-85303]
  - selftests/livepatch: Replace hardcoded module name with variable in test-callbacks.sh (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Use kallsyms_on_each_match_symbol() to improve performance (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Fix build failure on 32 bits processors (Denis Aleksandrov) [RHEL-85303]
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (Rafael Aquini) [RHEL-83249 RHEL-84184] {CVE-2025-21861}
  - mm: migrate_device: use more folio in migrate_device_finalize() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: use more folio in migrate_device_unmap() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: convert try_to_migrate() to folios (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: use a folio in migrate_device_range() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: convert to migrate_device_coherent_folio() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio (Rafael Aquini) [RHEL-84184]
  - mm: clear uffd-wp PTE/PMD state on mremap() (Rafael Aquini) [RHEL-80529 RHEL-84184] {CVE-2025-21696}
  - userfaultfd: move userfaultfd_ctx struct to header file (Rafael Aquini) [RHEL-80529 RHEL-84184]
  - mm: remove "prot" parameter from move_pte() (Rafael Aquini) [RHEL-80529 RHEL-84184]
  - mm: open-code page_folio() in dump_page() (Rafael Aquini) [RHEL-84184]
  - mm: open-code PageTail in folio_flags() and const_folio_flags() (Rafael Aquini) [RHEL-84184]
  - mm/compaction: fix UBSAN shift-out-of-bounds warning (Rafael Aquini) [RHEL-84184] {CVE-2025-21815}
  - mm: fix crashes from deferred split racing folio migration (Rafael Aquini) [RHEL-84184] {CVE-2024-42234}
  - mm: memcg: fix split queue list crash when large folio migration (Rafael Aquini) [RHEL-84184]
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT (Rafael Aquini) [RHEL-84184]
  - mm: shmem: remove unnecessary warning in shmem_writepage() (Rafael Aquini) [RHEL-84184]
  - mm/migrate: fix deadlock in migrate_pages_batch() on large folios (Rafael Aquini) [RHEL-84184]
  - mm/mglru: reset page lru tier bits when activating (Rafael Aquini) [RHEL-84184]
  - mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma (Rafael Aquini) [RHEL-84184]
  - mm: kmemleak: fix upper boundary check for physical address objects (Rafael Aquini) [RHEL-84184]
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment (Rafael Aquini) [RHEL-84184]
  - mm, madvise: fix potential workingset node list_lru leaks (Rafael Aquini) [RHEL-84184]
  - mm: move mapping_set_update out of <linux/swap.h> (Rafael Aquini) [RHEL-84184]
  - mm/migrate: fix shmem xarray update during migration (Rafael Aquini) [RHEL-84184]
  - memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled. (Rafael Aquini) [RHEL-84184]
  - memory tiering: read last_cpupid correctly in do_huge_pmd_numa_page() (Rafael Aquini) [RHEL-84184]
  - nommu: pass NULL argument to vma_iter_prealloc() (Rafael Aquini) [RHEL-84184] {CVE-2024-53109}
  - cachestat: fix page cache statistics permission checking (Rafael Aquini) [RHEL-78989 RHEL-84184] {CVE-2025-21691}
  - kernel: be more careful about dup_mmap() failures and uprobe registering (Rafael Aquini) [RHEL-84184] {CVE-2025-21709}
  - fork: avoid inappropriate uprobe access to invalid mm (Rafael Aquini) [RHEL-84184]
  - s390/pageattr: Implement missing kernel_page_present() (Rafael Aquini) [RHEL-84184]
  - x86/mm: further clarify switch_mm_irqs_off() documentation (Rafael Aquini) [RHEL-84184]
  - x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware hypervisors (Rafael Aquini) [RHEL-84184]
  - x86/kvm: Fix SEV check in sev_map_percpu_data() (Rafael Aquini) [RHEL-84184]
  - um: Fix the declaration of kasan_map_memory (Rafael Aquini) [RHEL-84184]
  - of: reserved-memory: Do not make kmemleak ignore freed address (Rafael Aquini) [RHEL-84184]
  - scripts/gdb: redefine MAX_ORDER sanely (Rafael Aquini) [RHEL-84184]
  - kasan: don't call find_vm_area() in a PREEMPT_RT kernel (Rafael Aquini) [RHEL-84184]
  - kasan: fix typo in kasan_poison_new_object documentation (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs-schemes: handle tried region directory allocation failure (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: avoid divide-by-zero during monitoring results update (Rafael Aquini) [RHEL-84184]
  - mm/damon/lru_sort: fix quota status loss due to online tunings (Rafael Aquini) [RHEL-84184]
  - mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon/reclaim: fix quota stauts loss due to online tunings (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: check error from damon_sysfs_update_target() (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: update monitoring target regions for online input commit (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: remove requested targets when online-commit inputs (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix damon_test_ops_registration() for DAMON_VADDR unset case (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: test only vaddr case on ops registration test (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix memory leak in damon_new_ctx() (Rafael Aquini) [RHEL-84184]
  - mm/damon/dbgfs-test: skip dbgfs_set_init_regions() test if PADDR is not registered (Rafael Aquini) [RHEL-84184]
  - mm/damon/dbgfs-test: skip dbgfs_set_targets() test if PADDR is not registered (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: make damon_start() waits until kdamond_fn() starts (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: use number of passed access sampling as a timer (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: fix return value from damos_wmark_metric_value (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: remove unnecessary si_meminfo invoke. (Rafael Aquini) [RHEL-84184]
  - mm/damon/ops-common: avoid divide-by-zero during region hotness calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon: implement a function for max nr_accesses safe calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon/vaddr: change asm-generic/mman-common.h to linux/mman.h (Rafael Aquini) [RHEL-84184]
  - mm/damon/tests/dbgfs-kunit: fix the header double inclusion guarding ifdef comment (Rafael Aquini) [RHEL-84184]
  - mm/damon: fix sparse warning for zero initializer (Rafael Aquini) [RHEL-84184]
  - mm/damon/tests/vaddr-kunit: init maple tree without MT_FLAGS_LOCK_EXTERN (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix memory leak in damon_new_region() (Rafael Aquini) [RHEL-84184]
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet (Rafael Aquini) [RHEL-84184]
  - ptp: Properly handle compat ioctls (Hangbin Liu) [RHEL-85028]
  - ptp: Ensure info->enable callback is always set (Hangbin Liu) [RHEL-85028] {CVE-2025-21814}
  - ptp: fix integer overflow in max_vclocks_store (Hangbin Liu) [RHEL-85028]
  - ptp: make ptp_class constant (Hangbin Liu) [RHEL-85028]
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [RHEL-33329] {CVE-2025-21926}
  - bdev: use bdev_io_min() for statx block size (Ming Lei) [RHEL-88002]
  - lib/iov_iter: fix import_iovec_ubuf iovec management (Ming Lei) [RHEL-87739]
  - iov_iter: Mark copy_iovec_from_user() noclone (Ming Lei) [RHEL-87739]
  - iov_iter: Mark copy_compat_iovec_from_user() noinline (Ming Lei) [RHEL-87739]
  - iov_iter: import single vector iovecs as ITER_UBUF (Ming Lei) [RHEL-87739]
  - iov_iter: convert import_single_range() to ITER_UBUF (Ming Lei) [RHEL-87739]
  - iov_iter: set nr_segs = 1 for ITER_UBUF (Ming Lei) [RHEL-87739]
  - redhat: Remove kernel-rt-kvm package (Wander Lairson Costa) [RHEL-76757]
  - NFS: O_DIRECT writes must check and adjust the file length (Benjamin Coddington) [RHEL-87767]
  - pnfs/flexfiles: retry getting layout segment for reads (Benjamin Coddington) [RHEL-87767]
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Benjamin Coddington) [RHEL-87767]
  - s390/diag: Add memory topology information via diag310 (Mete Durlu) [RHEL-72683]
  - net: let net.core.dev_weight always be non-zero (CKI Backport Bot) [RHEL-81686] {CVE-2025-21806}
  - sched: Fix stop_one_cpu_nowait() vs hotplug (Luis Claudio R. Goncalves) [RHEL-84526]
  - x86/tdx: Fix "in-kernel MMIO" check (Vitaly Kuznetsov) [RHEL-63318] {CVE-2024-47727}
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Desnes Nunes) [RHEL-78828 RHEL-81547] {CVE-2024-57981}
  - usb: xhci: Fix host controllers "dying" after suspend and resume (Desnes Nunes) [RHEL-78828]
  - acpi: typec: ucsi: Introduce a ->poll_cci method (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: make yoga_c630_ucsi_ops be static (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Fix deadlock during uvc_probe (Desnes Nunes) [RHEL-78828] {CVE-2024-58059}
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID" (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use (Desnes Nunes) [RHEL-78828] {CVE-2024-58079}
  - media: uvcvideo: Reorder uvc_status_init() (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Neoway N723-EA support (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MeiG Smart SRM815 (Desnes Nunes) [RHEL-78828]
  - USB: serial: cp210x: add Phoenix Contact UPS Device (Desnes Nunes) [RHEL-78828]
  - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (Desnes Nunes) [RHEL-78828]
  - usb-storage: Add max sectors quirk for Nokia 208 (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Desnes Nunes) [RHEL-78828]
  - USB: core: Disable LPM only for non-suspended ports (Desnes Nunes) [RHEL-78828]
  - usb: fix reference leak in usb_new_device() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpci: fix NULL pointer issue on shared irq case (Desnes Nunes) [RHEL-78828] {CVE-2024-57914}
  - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe() (Desnes Nunes) [RHEL-78828]
  - USB: usblp: return error when setting unsupported protocol (Desnes Nunes) [RHEL-78828]
  - usb: host: xhci-plat: set skip_phy_initialization if software node has XHCI_SKIP_PHY_INIT property (Desnes Nunes) [RHEL-78828]
  - usb: xhci: fix ring expansion regression in 6.13-rc1 (Desnes Nunes) [RHEL-78828]
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Improve redrive mode handling (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MediaTek T7XX compositions (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MeiG Smart SLM770A (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add TCL IK512 MBIM & ECM (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Don't display nvm_version unless upgrade supported (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Add support for Intel Panther Lake-M/P (Desnes Nunes) [RHEL-47432 RHEL-78828]
  - usb: typec: ucsi: Fix connector status writing past buffer size (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Fix completion notifications (Desnes Nunes) [RHEL-78828]
  - usb: misc: onboard_usb_dev: skip suspend/resume sequence for USB5744 SMBus support (Desnes Nunes) [RHEL-78828]
  - usb: core: hcd: only check primary hcd skip_phy_initialization (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: imx8mp: fix software node kernel dump (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: imx8mq-usb: correct reference to usb-switch.yaml (Desnes Nunes) [RHEL-78828]
  - usb: ehci-hcd: fix call balance of clocks handling routines (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: Add support for sink-bc12-completion-time-ms DT property (Desnes Nunes) [RHEL-78828]
  - dt-bindings: connector: Add time property for Sink BC12 detection completion (Desnes Nunes) [RHEL-78828]
  - USB: make to_usb_device_driver() use container_of_const() (Desnes Nunes) [RHEL-78828]
  - USB: make to_usb_driver() use container_of_const() (Desnes Nunes) [RHEL-78828]
  - USB: properly lock dynamic id list when showing an id (Desnes Nunes) [RHEL-78828]
  - USB: make single lock for all usb dynamic id lists (Desnes Nunes) [RHEL-78828]
  - drivers/usb/storage: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/serial: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/musb: refactor min/max with min_t/max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/mon: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/misc: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/host: refactor min/max with min_t/max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/core: refactor max with max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/gadget: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - usb: cdns3: Synchronise PCI IDs via common data base (Desnes Nunes) [RHEL-78828]
  - sub: cdns3: Use predefined PCI vendor ID constant (Desnes Nunes) [RHEL-78828]
  - sub: cdns2: Use predefined PCI vendor ID constant (Desnes Nunes) [RHEL-78828]
  - redhat/configs: Adding CONFIG_USB_CDNS2_UDC (Desnes Nunes) [RHEL-78828]
  - usb: cdns2: Add main part of Cadence USBHS driver (Desnes Nunes) [RHEL-78828]
  - usb: cdns2: Device side header file for CDNS2 driver (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: core: Set force_gen1 bit for all applicable SuperSpeed ports (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: gadget: Refine the logic for resizing Tx FIFOs (Desnes Nunes) [RHEL-78828]
  - USB: core: remove dead code in do_proc_bulk() (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: imx: add imx8ulp support (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Fix a missing bits to bytes conversion in ucsi_init() (Desnes Nunes) [RHEL-78828]
  - USB: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Replace deprecated PCI functions (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Convert connector specific commands to bitmaps (Desnes Nunes) [RHEL-78828]
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Desnes Nunes) [RHEL-78828]
  - USB: serial: pl2303: account for deficits of clones (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Limit Stop Endpoint retries (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove irrelevant comment (Desnes Nunes) [RHEL-78828]
  - usb: xhci: add help function xhci_dequeue_td() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: refactor xhci_td_cleanup() to return void (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove unused arguments from td_to_noop() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: improve xhci_clear_command_ring() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: request MSI/-X according to requested amount (Desnes Nunes) [RHEL-78828]
  - usb: xhci: move link TRB quirk to xhci_gen_setup() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: simplify TDs start and end naming scheme in struct 'xhci_td' (Desnes Nunes) [RHEL-78828]
  - xhci: pci: Fix indentation in the PCI device ID definitions (Desnes Nunes) [RHEL-78828]
  - xhci: pci: Use standard pattern for device IDs (Desnes Nunes) [RHEL-78828]
  - xhci: Don't perform Soft Retry for Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Fix control transfer error on Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Don't issue Reset Device command to Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Combine two if statements for Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - usb: xhci: add xhci_initialize_ring_segments() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: rework xhci_link_segments() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: refactor xhci_link_rings() to use source and destination rings (Desnes Nunes) [RHEL-78828]
  - usb: xhci: rework xhci_free_segments_for_ring() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: adjust xhci_alloc_segments_for_ring() arguments (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove option to change a default ring's TRB cycle bit (Desnes Nunes) [RHEL-78828]
  - usb: xhci: introduce macro for ring segment list iteration (Desnes Nunes) [RHEL-78828]
  - xhci: debugfs: Add virt endpoint state to xhci debugfs (Desnes Nunes) [RHEL-78828]
  - xhci: trace stream context at Set TR Deq command completion (Desnes Nunes) [RHEL-78828]
  - xhci: add stream context tracing (Desnes Nunes) [RHEL-78828]
  - xhci: Don't trace ring at every enqueue or dequeue increase (Desnes Nunes) [RHEL-78828]
  - xhci: show DMA address of TRB when tracing TRBs (Desnes Nunes) [RHEL-78828]
  - xhci: Cleanup Candence controller PCI device and vendor ID usage (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Fix sum_trb_lengths() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Remove unused parameters of next_trb() (Desnes Nunes) [RHEL-78828]
  - xhci: Add Isochronous TRB fields to TRB tracer (Desnes Nunes) [RHEL-78828]
  - phy: tegra: xusb: Set fwnode for xusb port devices (Desnes Nunes) [RHEL-78828]
  - usb: Use (of|device)_property_present() for non-boolean properties (Desnes Nunes) [RHEL-78828]
  - misc: rtsx: Cleanup on DRV_NAME cardreader variables (Desnes Nunes) [RHEL-78828]
  - usb: use "prompt" instead of "bool" for choice prompts (Desnes Nunes) [RHEL-78828]
  - redhat/configs: Adding CONFIG_TYPEC_MUX_TUSB1046 (Desnes Nunes) [RHEL-78828]
  - usb: typec: mux: Add support for the TUSB1046 crosspoint switch (Desnes Nunes) [RHEL-78828]
  - MAINTAINERS: Drop myself as maintainer of TYPEC port controller drivers (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: Describe TUSB1046 crosspoint switch (Desnes Nunes) [RHEL-78828]
  - USB: xhci: add support for PWRON active high (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: add TUSB73x0 PCIe (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Implement asymmetric lane margining (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Don't hardcode margining results size (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Refactor hardware margining result parsing (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Replace margining lane numbers with an enum (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Replace "both lanes" with "all lanes" (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Implement Gen 4 margining eye selection (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Add USB4 Gen 4 margining capabilities (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Don't hardcode margining capabilities size (Desnes Nunes) [RHEL-78828]
  - usb: core: use sysfs_emit() instead of sprintf() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: Add support for parsing time dt properties (Desnes Nunes) [RHEL-78828]
  - dt-bindings: connector: Add properties to define time values (Desnes Nunes) [RHEL-78828]
  - usb: storage: fix wrong comments for struct bulk_cb_wrap (Desnes Nunes) [RHEL-78828]
  - usb: storage: use US_BULK_FLAG_OUT instead of constant values (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Helper for Get Connector Status command (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Remove some deadcode (Desnes Nunes) [RHEL-78828]
  - media: usb: drop vb2_ops_wait_prepare/finish (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Stop stream during unregister (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: mxs-usb-phy: add imx8qxp compatible (Desnes Nunes) [RHEL-78828]
  - xhci: add helper to stop endpoint and wait for completion (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Add support for the partner USB Modes (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: ucsi: Supply the USB capabilities to the ports (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: Add attribute file showing the USB Modes of the partner (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: Add attribute file showing the supported USB modes of the port (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: require FMODE_WRITE for usbdev_mmap() (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: UCSI2.0 Set Sink Path command support (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Do not call ACPI _DSM method for UCSI read operations (Desnes Nunes) [RHEL-78828]
  - memstick: Fix typo in comment (Desnes Nunes) [RHEL-78828]
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Fix the S-Video capture on August VGB100 (Desnes Nunes) [RHEL-78828]
  - media: pvrusb2: Use kmemdup_array instead of kmemdup for multiple allocation (Desnes Nunes) [RHEL-78828]
  - media: pwc: set lock before calling vb2_queue_init() (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Exit early if there is not int_urb (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Avoid race condition during unregister (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Refactor the status irq API (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Require entities to have a non-zero unique ID (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4033 (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add support for the D3DFMT_R5G6B5 pixmap type (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: RealSense D421 Depth module metadata (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add luma 16-bit interlaced pixel format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add luma 16-bit interlaced pixel format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add V4L2-PIX-FMT-Y14P format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add V4L2-PIX-FMT-Y12P format (Desnes Nunes) [RHEL-78828]
  - media: Add Y012 video format (Desnes Nunes) [RHEL-78828]
  - media: uapi: Add IPU3 packed Y10 format (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: dwc3-imx8mp: add compatible string for imx95 (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: imx8mq-usb: add compatible "fsl,imx95-usb-phy" (Desnes Nunes) [RHEL-78828]
  - USB: chaoskey: fail open after removal (Desnes Nunes) [RHEL-78828]
  - usb: yurex: make waiting on yurex_write interruptible (Desnes Nunes) [RHEL-78828]
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: improve error recovery for ISO transfer (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: Add revision check of 2.20[CI_REVISION_22] (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: improve dTD link logic (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: create bounce buffer for problem sglist entries if possible (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: limit usb request length to max 16KB (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: cypress,cypd4226: Drop Tegra specific GPIO defines (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: genesys,gl850g: allow downstream device subnodes (Desnes Nunes) [RHEL-78828]
  - usb: typec: stusb160x: Make use of i2c_get_match_data() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: use max() to get higher value (Desnes Nunes) [RHEL-78828]
  - usb: atm: Correct some typos (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: Correct some typos in comments (Desnes Nunes) [RHEL-78828]
  - usb: typec: Fix typo in comment (Desnes Nunes) [RHEL-78828]
  - usb: host: fix typo in the comment (Desnes Nunes) [RHEL-78828]
  - staging: octeon-usb: move driver out of staging (Desnes Nunes) [RHEL-78828]
  - ipc/sem: use flexible array in 'struct sem_undo' (Rafael Aquini) [RHEL-83456]
  - mqueue: convert to ctime accessor functions (Rafael Aquini) [RHEL-83456]
  - ipc,namespace: batch free ipc_namespace structures (Rafael Aquini) [RHEL-83456]
  - ipc,namespace: make ipc namespace allocation wait for pending free (Rafael Aquini) [RHEL-83456]
  - ipc/sem: Fix dangling sem_array access in semtimedop race (Rafael Aquini) [RHEL-83456]
  - ipc: mqueue: remove unnecessary conditionals (Rafael Aquini) [RHEL-83456]
  - ipc/util.c: cleanup and improve sysvipc_find_ipc() (Rafael Aquini) [RHEL-83456]
  - ipc/mqueue: remove unnecessary (void*) conversion (Rafael Aquini) [RHEL-83456]
  - ipc: fix memleak if msg_init_ns failed in create_ipc_ns (Rafael Aquini) [RHEL-83456] {CVE-2024-53175}
  - ipc: Free mq_sysctls if ipc namespace creation failed (Rafael Aquini) [RHEL-83456]
  - ipc: update semtimedop() to use hrtimer (Rafael Aquini) [RHEL-83456]
  - ipc/sem: remove redundant assignments (Rafael Aquini) [RHEL-83456]
  - ipc/sem: do not sleep with a spin lock held (Rafael Aquini) [RHEL-83456]
  - shm: extend forced shm destroy to support objects from several IPC nses (Rafael Aquini) [RHEL-83456]
  - ipc: WARN if trying to remove ipc object which is absent (Rafael Aquini) [RHEL-83456]
  - ARM: 9114/1: oabi-compat: rework sys_semtimedop emulation (Rafael Aquini) [RHEL-83456]
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CKI Backport Bot) [RHEL-81457] {CVE-2025-21738}
  - platform/x86/intel/vsec: Add Diamond Rapids support (David Arcari) [RHEL-47412]
  - platform/x86/intel/vsec: Add support for Panther Lake (David Arcari) [RHEL-47412]
  - platform/x86/intel/vsec: Remove a useless mutex (David Arcari) [RHEL-47412]
  - cgroup/cpuset: Add warnings to catch inconsistency in exclusive CPUs (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Add a remote partition transition test to test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Clean up and restructure test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Update test_cpuset_prs.sh to use | as effective CPUs and state separator (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Code cleanup and comment update (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Remove remote_partition_check() & make update_cpumasks_hier() handle remote partition (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix error handling in remote_partition_disable() (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix race between newly created partition and dying one (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per operation (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in update_cpumasks_hier()" (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix spelling errors in file kernel/cgroup/cpuset.c (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Make test_cpuset_prs.sh deal with pre-isolated CPUs (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Account for boot time isolated CPUs (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove use_parent_ecpus of cpuset (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove fetch_xcpus (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Add new test cases to test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove child_ecpus_count (Waiman Long) [RHEL-83455]
  - cpuset: use Union-Find to optimize the merging of cpumasks (Waiman Long) [RHEL-83455]
  - Union-Find: add a new module in kernel library (Waiman Long) [RHEL-83455]
  - scsi: core: Clear driver private data when retrying request (Ewan D. Milne) [RHEL-86156]
  - scsi: core: Do not retry I/Os during depopulation (Ewan D. Milne) [RHEL-86156]
  - scsi: core: Use GFP_NOIO to avoid circular locking dependency (Ewan D. Milne) [RHEL-86156]
  - scsi: transport: sas: spi: Fix kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_scan: Add kernel-doc for exported function (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_lib: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_ioctl: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_error: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Skip host/bus reset settle delay (Ewan D. Milne) [RHEL-86156]
  - scsi: Eliminate scsi_register() and scsi_unregister() usage & docs (Ewan D. Milne) [RHEL-86156]
  - scsi: docs: Remove init_this_scsi_driver() (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Fix hrtimer support for ndelay (Ewan D. Milne) [RHEL-86156]
  - scsi: bsg: Replace zero-length array with flexible array member (Ewan D. Milne) [RHEL-86156]
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_transport_fc: Allow setting rport state to current state (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Maintain write statistics per group number (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Implement GET STREAM STATUS (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Implement the IO Advice Hints Grouping mode page (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Allocate the MODE SENSE response from the heap (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Rework subpage code error handling (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Rework page code error handling (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Support the block limits extension VPD page (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Reduce code duplication (Ewan D. Milne) [RHEL-86156]
  - treewide: Switch/rename to timer_delete[_sync]() (Tony Camuso) [RHEL-82121]
  - ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (Tony Camuso) [RHEL-82121]
  - ipmi: make ipmi_destroy_user() return void (Tony Camuso) [RHEL-82121]
  - char:ipmi: Fix a not-used variable on a non-ACPI system (Tony Camuso) [RHEL-82121]
  - char:ipmi: Fix the wrong format specifier (Tony Camuso) [RHEL-82121]
  - [tree-wide] finally take no_llseek out (Tony Camuso) [RHEL-82121]
  - ipmi: ipmb: Add check devm_kasprintf() returned value (Tony Camuso) [RHEL-82121]
  - ipmi:ssif: Improve detecting during probing (Tony Camuso) [RHEL-82121]
  - ipmi: ipmi_ssif: fix module autoloading (Tony Camuso) [RHEL-82121]
  - RDMA/efa: Align interrupt related fields to same type (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Reset device on probe failure (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Report link speed according to device attributes (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Add option to set QP service level on create (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Update device interface (Kamal Heib) [RHEL-83223]
  - rtla/tests: Test setting default options (Tomas Glozar) [RHEL-86051]
  - rtla/tests: Reset osnoise options before check (Tomas Glozar) [RHEL-86051]
  - rtla: Always set all tracer options (Tomas Glozar) [RHEL-86051]
  - rtla/osnoise: Set OSNOISE_WORKLOAD to true (Tomas Glozar) [RHEL-86051]
  - rtla: Unify apply_config between top and hist (Tomas Glozar) [RHEL-86051]
  - rtla/osnoise: Unify params struct (Tomas Glozar) [RHEL-86051]
  - redhat/kernel.spec.template: Build rtla with BPF sample collection (Tomas Glozar) [RHEL-77358]
  - tools/build: Use SYSTEM_BPFTOOL for system bpftool (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Test BPF mode (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_top: Use BPF to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_top: Move divisor to update (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_hist: Use BPF to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Add BPF skeleton to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla: Add optional dependency on BPF tooling (Tomas Glozar) [RHEL-77358]
  - tools/build: Add bpftool-skeletons feature test (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Unify params struct (Tomas Glozar) [RHEL-77358]
  - trace/osnoise: Add trace events for samples (Tomas Glozar) [RHEL-77358]
  - tools/rtla: Add basic test suite (Tomas Glozar) [RHEL-77358]
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CKI Backport Bot) [RHEL-82701] {CVE-2025-21839}
  - watch_queue: fix pipe accounting mismatch (Carlos Maiolino) [RHEL-78249]
  - smb: client: don't retry IO on failed negprotos with soft mounts (Paulo Alcantara) [RHEL-79765]
  - tools/rv: Keep user LDFLAGS in build (Tomas Glozar) [RHEL-82810]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-582.el9]
changelog:
  - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-88093]
  - docs: move x86 documentation into Documentation/arch/ (Waiman Long) [RHEL-68940]
  - x86: Add missing code to arch/x86/include/asm/linkage.h (Waiman Long) [RHEL-68940]
  - jump_label: Fix static_key_slow_dec() yet again (Waiman Long) [RHEL-68940]
  - jump_label: Fix the fix, brown paper bags galore (Waiman Long) [RHEL-68940]
  - jump_label: Simplify and clarify static_key_fast_inc_cpus_locked() (Waiman Long) [RHEL-68940]
  - jump_label: Clarify condition in static_key_fast_inc_not_disabled() (Waiman Long) [RHEL-68940]
  - jump_label: Fix concurrency issues in static_key_slow_dec() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Use the correct length when optimizing NOPs (Waiman Long) [RHEL-68940]
  - x86/alternatives: Sort local vars in apply_alternatives() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Optimize optimize_nops() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Get rid of __optimize_nops() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Use a temporary buffer when optimizing NOPs (Waiman Long) [RHEL-68940]
  - x86/alternatives: Catch late X86_FEATURE modifiers (Waiman Long) [RHEL-68940]
  - x86/percpu: Use __force to cast from __percpu address space (Waiman Long) [RHEL-68940]
  - x86/percpu: Unify arch_raw_cpu_ptr() defines (Waiman Long) [RHEL-68940]
  - jump_label,module: Don't alloc static_key_mod for __ro_after_init keys (Waiman Long) [RHEL-68940]
  - x86/bpf: Fix IP for relocating call depth accounting (Waiman Long) [RHEL-68940]
  - x86/alternatives: Move apply_relocation() out of init section (Waiman Long) [RHEL-68940]
  - x86/percpu: Avoid sparse warning with cast to named address space (Waiman Long) [RHEL-68940]
  - x86/traps: Use current_top_of_stack() helper in traps.c (Waiman Long) [RHEL-68940]
  - x86/percpu: Fix "const_pcpu_hot" version generation failure (Waiman Long) [RHEL-68940]
  - x86/callthunks: Correct calculation of dest address in is_callthunk() (Waiman Long) [RHEL-68940]
  - x86/smp: Use atomic_try_cmpxchg in native_stop_other_cpus() (Waiman Long) [RHEL-68940]
  - x86/smp: Move the call to smp_processor_id() after the early exit in native_stop_other_cpus() (Waiman Long) [RHEL-68940]
  - x86/percpu: Declare const_pcpu_hot as extern const variable (Waiman Long) [RHEL-68940]
  - x86/paravirt: Remove no longer needed paravirt patching code (Waiman Long) [RHEL-68940]
  - x86/callthunks: Mark apply_relocation() as __init_or_module (Waiman Long) [RHEL-68940]
  - x86/callthunks: Fix and unify call thunks assembly snippets (Waiman Long) [RHEL-68940]
  - x86/callthunks: Handle %rip-relative relocations in call thunk template (Waiman Long) [RHEL-68940]
  - x86/percpu: Define PER_CPU_VAR macro also for !__ASSEMBLY__ (Waiman Long) [RHEL-68940]
  - x86/percpu: Return correct variable from current_top_of_stack() (Waiman Long) [RHEL-68940]
  - x86/percpu: Introduce const-qualified const_pcpu_hot to micro-optimize code generation (Waiman Long) [RHEL-68940]
  - x86/percpu: Introduce %rip-relative addressing to PER_CPU_VAR() (Waiman Long) [RHEL-68940]
  - x86/percpu, xen: Correct PER_CPU_VAR() usage to include symbol and its addend (Waiman Long) [RHEL-68940]
  - x86/percpu: Correct PER_CPU_VAR() usage to include symbol and its addend (Waiman Long) [RHEL-68940]
  - x86/fpu: Clean up FPU switching in the middle of task switching (Waiman Long) [RHEL-68940]
  - x86/percpu: Use the correct asm operand modifier in percpu_stable_op() (Waiman Long) [RHEL-68940]
  - x86/percpu: Use C for arch_raw_cpu_ptr(), to improve code generation (Waiman Long) [RHEL-68940]
  - x86/percpu: Rewrite arch_raw_cpu_ptr() to be easier for compilers to optimize (Waiman Long) [RHEL-68940]
  - x86/percpu: Disable named address spaces for KASAN (Waiman Long) [RHEL-68940]
  - x86/percpu: Use C for percpu read/write accessors (Waiman Long) [RHEL-68940]
  - x86/percpu: Use compiler segment prefix qualifier (Waiman Long) [RHEL-68940]
  - x86/percpu: Enable named address spaces with known compiler version (Waiman Long) [RHEL-68940]
  - x86/callthunks: Use EXPORT_PER_CPU_SYMBOL_GPL() for per CPU variables (Waiman Long) [RHEL-68940]
  - x86/paravirt: Make BUG_func() usable by non-GPL modules (Waiman Long) [RHEL-68940]
  - x86/alternative: Correct feature bit debug output (Waiman Long) [RHEL-68940]
  - x86/paravirt: Switch mixed paravirt/alternative calls to alternatives (Waiman Long) [RHEL-68940]
  - x86/alternative: Add indirect call patching (Waiman Long) [RHEL-68940]
  - x86/paravirt: Move some functions and defines to alternative.c (Waiman Long) [RHEL-68940]
  - x86/paravirt: Introduce ALT_NOT_XEN (Waiman Long) [RHEL-68940]
  - x86/alternatives: Sync core before enabling interrupts (Waiman Long) [RHEL-68940]
  - arch: Remove cmpxchg_double (Waiman Long) [RHEL-68940]
  - x86,intel_iommu: Replace cmpxchg_double() (Waiman Long) [RHEL-68940]
  - x86,amd_iommu: Replace cmpxchg_double() (Waiman Long) [RHEL-68940]
  - locking/atomic: Correct (cmp)xchg() instrumentation (Waiman Long) [RHEL-68940]
  - arm64: cmpxchg_double*: hazard against entire exchange variable (Waiman Long) [RHEL-68940]
  - jump_label: Prevent key->enabled int overflow (Waiman Long) [RHEL-68940]
  - jump_label: Use atomic_try_cmpxchg() in static_key_slow_inc_cpuslocked() (Waiman Long) [RHEL-68940]
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault) [RHEL-57031]
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Hangbin Liu) [RHEL-84573]
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Hangbin Liu) [RHEL-84573] {CVE-2025-22005}
  - net: ipv6: fix dst ref loop on input in seg6 lwt (Hangbin Liu) [RHEL-84573]
  - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (Hangbin Liu) [RHEL-84573] {CVE-2025-21768}
  - inet: ipmr: fix data-races (Hangbin Liu) [RHEL-84573]
  - perf script: Fix hangup in offline flamegraph report (Anubhav Shelat) [RHEL-87957]
  - perf script: force stdin for flamegraph in live mode (Anubhav Shelat) [RHEL-87957]
  - locking/lockdep: Add kasan_check_byte() check in lock_acquire() (Waiman Long) [RHEL-81997]
  - locking/lockdep: Disable KASAN instrumentation of lockdep.c (Waiman Long) [RHEL-81997]
  - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Fix driver sending truncated data (Bastien Nocera) [RHEL-74483]
  - Bluetooth: MGMT: Fix Add Device to responding before completing (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_sync: Fix not setting Random Address when required (Bastien Nocera) [RHEL-74483]
  - Bluetooth: iso: Fix circular lock in iso_conn_big_sync (Bastien Nocera) [RHEL-74483] {CVE-2024-54191}
  - Bluetooth: SCO: Add support for 16 bits transparent voice setting (Bastien Nocera) [RHEL-74483]
  - Bluetooth: iso: Fix recursive locking warning (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Improve setsockopt() handling of malformed user input (Bastien Nocera) [RHEL-74483]
  - net: Make copy_safe_from_sockptr() match documentation (Bastien Nocera) [RHEL-74483]
  - net: add copy_safe_from_sockptr() helper (Bastien Nocera) [RHEL-74483]
  - net/tcp: Introduce TCP_AO setsockopt()s [partial] (Bastien Nocera) [RHEL-74483]
  - Bluetooth: SCO: remove the redundant sco_conn_put (Bastien Nocera) [RHEL-74483]
  - Bluetooth: MGMT: Add initial implementation of MGMT_OP_HCI_CMD_SYNC (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_bcm: Use the devm_clk_get_optional() helper (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Send BIG Create Sync via hci_sync (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_conn: Remove alloc from critical section (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Use kref to track lifetime of iso_conn (Bastien Nocera) [RHEL-74483]
  - Bluetooth: SCO: Use kref to track lifetime of sco_conn (Bastien Nocera) [RHEL-74483]
  - Bluetooth: HCI: Add IPC(11) bus type (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add 3 HWIDs for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Fix matching parent socket for BIS slave (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btrtl: Decrease HCI_OP_RESET timeout from 10 s to 2 s (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btintel_pcie: Replace deprecated PCI functions (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Set quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Support new quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Add new quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_qca: use devm_clk_get_optional_enabled_with_rate() (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btmtksdio: Lookup device node only as fallback (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Add GPIO support to power save feature (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add USB HW IDs for MT7920/MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (Bastien Nocera) [RHEL-74483]
  - bluetooth: Fix typos in the comments (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Rename IW615 to IW610 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Drop _v0 suffix from FW names (Bastien Nocera) [RHEL-74483]
  - Bluetooth: add HAS_IOPORT dependencies (Bastien Nocera) [RHEL-74483]
  - perf annotate: Return errors from disasm_line__parse_powerpc() (Jakub Brnak) [RHEL-83785]
  - perf annotate: Add annotation_options.disassembler_used (Jakub Brnak) [RHEL-83785]
  - perf annotate: Use an array for the disassembler preference (Jakub Brnak) [RHEL-83785]
  - perf disasm: Allow configuring what disassemblers to use (Jakub Brnak) [RHEL-83785]
  - perf disasm: Define stubs for the LLVM and capstone disassemblers (Jakub Brnak) [RHEL-83785]
  - perf disasm: Introduce symbol__disassemble_objdump() (Jakub Brnak) [RHEL-83785]
  - netpoll: hold rcu read lock in __netpoll_send_skb() (Paolo Abeni) [RHEL-87474]
  - net: Clear old fragment checksum value in napi_reuse_skb (Paolo Abeni) [RHEL-87474]
  - neighbour: use RCU protection in __neigh_notify() (Paolo Abeni) [RHEL-87474]
  - iomap: add a workaround for racy i_size updates on block devices (CKI Backport Bot) [RHEL-79099]
  - selftests: netfilter: add test case for recent mismatch bug (CKI Backport Bot) [RHEL-87163]
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (CKI Backport Bot) [RHEL-87163]
  - sctp: detect and prevent references to a freed transport in sendmsg (Xin Long) [RHEL-84590]
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Xin Long) [RHEL-84590]
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: udp_port: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - scsi: fnic: Remove unnecessary NUL-terminations (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove redundant flush_workqueue() calls (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary spinlock locking and unlocking (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace fnic->lock_flags with local flags (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace use of sizeof with standard usage (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix indentation and remove unnecessary parenthesis (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary debug print (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Test for memory allocation failure and return error code (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return appropriate error code from failure of scsi drv init (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return appropriate error code for mem alloc failure (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix use of uninitialized value in debug message (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Delete incorrect debugfs error handling (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove extern definition from .c files (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Increment driver version (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support to handle port channel RSCN (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Code cleanup (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add stats and related functionality (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify fnic interfaces to use FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify IO path to use FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add functionality in fnic to support FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and integrate support for FIP (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and integrate support for FDMI (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add Cisco hardware model names (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for unsolicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for target based solicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for fabric based solicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add headers and definitions for FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vcalloc() instead of vmalloc() and memset(0) (Karan Kumar) [RHEL-64440]
  - scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Move flush_work initialization out of if block (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Convert snprintf() to sysfs_emit() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Clean up some inconsistent indenting (Karan Kumar) [RHEL-64440]
  - scsi: fnic: unlock on error path in fnic_queuecommand() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Increment driver version (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Improve logs and add support for multiqueue (MQ) (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic driver (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic_main.c (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove usage of host_lock (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Define stats to track multiqueue (MQ) IOs (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify ISRs to support multiqueue (MQ) (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Refactor and redefine fnic.h for multiqueue (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Get copy workqueue count and interrupt mode from config (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Rename wq_copy to hw_copy_wq (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and improve log messages (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and use fnic number (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify definitions to sync with VIC firmware (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return error if vmalloc() failed (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Clean up some inconsistent indenting (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix sg_reset success path (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unused functions fnic_scsi_host_start/end_tag() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace sgreset tag with max_tag_id (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vmalloc_array() and vcalloc() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vzalloc() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Refactor code in fnic probe to initialize SCSI layer (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace DMA mask of 64 bits with 47 bits (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unneeded flush_workqueue() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove redundant NULL check (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Stop using the SCSI pointer (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix a tracing statement (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Call scsi_done() directly (Karan Kumar) [RHEL-64440]
  - tools/power turbostat: v2025.05.06 (David Arcari) [RHEL-86839]
  - tools/power turbostat: disable "cpuidle" invocation counters, by default (David Arcari) [RHEL-86839]
  - tools/power turbostat: re-factor sysfs code (David Arcari) [RHEL-86839]
  - tools/power turbostat: Restore GFX sysfs fflush() call (David Arcari) [RHEL-86839]
  - tools/power turbostat: Document GNR UncMHz domain convention (David Arcari) [RHEL-86839]
  - tools/power turbostat: report CoreThr per measurement interval (David Arcari) [RHEL-86839]
  - tools/power turbostat: Increase CPU_SUBSET_MAXCPUS to 8192 (David Arcari) [RHEL-86839]
  - tools/power turbostat: Add idle governor statistics reporting (David Arcari) [RHEL-86839]
  - tools/power turbostat: Fix names matching (David Arcari) [RHEL-86839]
  - tools/power turbostat: Allow Zero return value for some RAPL registers (David Arcari) [RHEL-86839]
  - tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options (David Arcari) [RHEL-86839]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (David Arcari) [RHEL-45087]
  - platform/x86: intel: Use *-y instead of *-objs in Makefile (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Update documentation with image download path (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add Clearwater Forest to CPU support list (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Fix SBAF title underline length (David Arcari) [RHEL-45087]
  - trace: platform/x86/intel/ifs: Add SBAF trace support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add SBAF test support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add SBAF test image loading support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Refactor MSR usage in IFS test code (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Initialize union ifs_status to zero (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Switch to new Intel CPU model defines (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Disable irq during one load stage (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Classify error scenarios correctly (David Arcari) [RHEL-45087]
  - RDMA/mlx5: Fix implicit ODP hang on parent deregistration (CKI Backport Bot) [RHEL-81415] {CVE-2025-21714}
  - RDMA/mlx5: Fix implicit ODP use after free (CKI Backport Bot) [RHEL-81415] {CVE-2025-21714}
  - redhat: remove kernel-ipaclones-internal package (Joe Lawrence) [RHEL-86518]
  - net: decrease cached dst counters in dst_release (Antoine Tenart) [RHEL-83031]
  - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-86674]
  - RDMA/bnxt_re: Remove unusable nq variable (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix budget handling of notification queue (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support perf management counters (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix reporting maximum SRQs on P7 chips (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix allocation of QP table (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix the statistics for Gen P7 VF (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix issue in the unload path (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add sanity checks on rdev validity (Sreekanth Reddy) [RHEL-72652 RHEL-76569 RHEL-80075]
  - RDMA/bnxt_re: Fix an issue in bnxt_re_async_notifier (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Allocate dev_attr information dynamically (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Pass the context for ulp_irq_stop (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support to handle DCB_CONFIG_CHANGE event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Query firmware defaults of CC params during probe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add Async event handling support (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - bnxt_en: Add ULP call to notify async events (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove deliver net device event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix MSN table size for variable wqe mode (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add send queue size check for variable wqe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix to export port num to ib_query_qp (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix setting mandatory attributes for modify_qp (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove unnecessary header file inclusion (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Eliminate need for some forward declarations (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Optimize error handling in bnxt_re_probe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove unnecessary goto in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove extra new line in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Don't fail destroy QP and cleanup debugfs earlier (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Use the default mode of congestion control (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support different traffic class (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Cache MSIx info to a local structure (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Refurbish CQ to NQ hash calculation (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for CQ rx coalescing (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Refactor NQ allocation (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fail probe early when not enough MSI-x vectors are reserved (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add set_func_resources support for P5/P7 adapters (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Enhance RoCE SRIOV resource configuration design (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for optimized modify QP (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - bnxt_en: Add support for RoCE sriov configuration (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add debugfs hook in the driver (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support raw data query for each resources (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for querying HW contexts (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support driver specific data collection using rdma tool (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix access flags for MR and QP modify (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for modify_device hook (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Marcin Juszkiewicz) [RHEL-83075]
  - igb: Fix potential invalid memory access in igb_init_module() (CKI Backport Bot) [RHEL-73651] {CVE-2024-52332}
  - perf vendor events: Update Tigerlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update SkylakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Skylake metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Sierraforest events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Rocketlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Meteorlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update/add Lunarlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update IcelakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Icelake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update HaswellX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Haswell events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update/add Graniterapids events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update GrandRidge events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update EmeraldRapids events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Add Clearwaterforest events (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update CascadelakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update BroadwellX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update BroadwellDE events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Broadwell events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Add Arrowlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update AlderlakeN events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Alderlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Sapphirerapids events/metrics (Michael Petlan) [RHEL-21925]
  - nfsd: fix UAF when access ex_uuid or ex_stats (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - SUNRPC: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - nfsd: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - SUNRPC: introduce cache_check_rcu to help check in rcu context (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - Enable X86_USER_SHADOW_STACK (Štěpán Horáček) [RHEL-15599]
  - mm: don't try THP alignment for FS without get_unmapped_area (Štěpán Horáček) [RHEL-15599]
  - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes (Štěpán Horáček) [RHEL-15599]
  - mm: care about shadow stack guard gap when getting an unmapped area (Štěpán Horáček) [RHEL-15599]
  - mm: pass vm_flags to generic_get_unmapped_area() (Štěpán Horáček) [RHEL-15599]
  - mm: make arch_get_unmapped_area() take vm_flags by default (Štěpán Horáček) [RHEL-15599]
  - x86/mm: care about shadow stack guard gap during placement (Štěpán Horáček) [RHEL-15599]
  - x86/mm: implement HAVE_ARCH_UNMAPPED_AREA_VMFLAGS (Štěpán Horáček) [RHEL-15599]
  - mm: take placement mappings gap into account (Štěpán Horáček) [RHEL-15599]
  - treewide: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - powerpc: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - parisc: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - csky: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - thp: add thp_get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: use get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: remove export for get_unmapped_area() (Štěpán Horáček) [RHEL-15599]
  - mm: introduce arch_get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: switch mm->get_unmapped_area() to a flag (Štěpán Horáček) [RHEL-15599]
  - proc: refactor pde_get_unmapped_area as prep (Štěpán Horáček) [RHEL-15599]
  - selftests/x86: add placement guard gap test for shstk (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Enable shadow stacks for x32 (Štěpán Horáček) [RHEL-15599]
  - arch: Reserve map_shadow_stack() syscall number for all architectures (Štěpán Horáček) [RHEL-15599]
  - mm: thp_get_unmapped_area must honour topdown preference (Štěpán Horáček) [RHEL-15599]
  - mm: mmap: map MAP_STACK to VM_NOHUGEPAGE (Štěpán Horáček) [RHEL-15599]
  - mm: align larger anonymous mappings on THP boundaries (Štěpán Horáček) [RHEL-15599]
  - alpha: Fix up new futex syscall numbers (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add warning for shadow stack double unmap (Štěpán Horáček) [RHEL-15599]
  - selftests/x86: Update map_shadow_stack syscall nr (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Change order of __user in type (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Don't retry vm_munmap() on -EINTR (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add ARCH_SHSTK_STATUS (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add ARCH_SHSTK_UNLOCK (Štěpán Horáček) [RHEL-15599]
  - crypto: ccp - Fix uAPI definitions of PSP errors (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add support for PCI device 0x1134 (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix check for the primary ASP device (Vladis Dronov) [RHEL-85131]
  - crypto: ccp: Add external API interface for PSP module initialization (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Use scoped guard for mutex (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - do not request interrupt on cmd completion when irqs disabled (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Remove unused declaration sp_get_master() (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add additional information about an SEV firmware upgrade (Vladis Dronov) [RHEL-85131]
  - KVM: SEV: uapi: fix typo in SEV_RET_INVALID_CONFIG (Vladis Dronov) [RHEL-85131]
  - crypto: ccp: Add the SNP_VLEK_LOAD command (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Move message about TSME being enabled later in init (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add support for getting security attributes on some older systems (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - align psp_platform_access_msg (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Move security attributes to their own file (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Represent capabilities register as a union (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - drop platform ifdef checks (Vladis Dronov) [RHEL-85131]
  - crypto: tools/ccp - Remove unused variable (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Update return values for some unit tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix some unfused tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix sample application signature passing (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix DBC sample application error handling (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix ioctl unit tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add Mario to MAINTAINERS (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add unit tests for dynamic boost control (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add a sample python script for Dynamic Boost Control (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add a sample library for ioctl use (Vladis Dronov) [RHEL-85131]
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CKI Backport Bot) [RHEL-83191] {CVE-2025-21847}
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long) [RHEL-69423]
  - firmware: arm_scpi: Move power-domain driver to the pmdomain dir (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scpi: Convert to platform remove callback returning void (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-65607]
  - arm64: Use SYSTEM_OFF2 PSCI call to power off for hibernate (Steve Dunnagan) [RHEL-65607]
  - firmware/psci: Add definitions for PSCI v1.3 specification (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Report duplicate opps as firmware bugs (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Skip opp duplicates (Steve Dunnagan) [RHEL-65607]
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Steve Dunnagan) [RHEL-65607]
  - arm64: smccc: replace custom COUNT_ARGS() & CONCATENATE() implementations (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use vendor string in max-rx-timeout-ms (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Reject clear channel request on A2P (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Queue in scmi layer for mailbox implementation (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Give SMC transport precedence over mailbox (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (Steve Dunnagan) [RHEL-65607]
  - redhat/configs: Add SCMI configs (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add initial support for i.MX MISC protocol (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add initial support for i.MX BBM protocol (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add NXP i.MX95 SCMI documentation (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace comma with the semicolon (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace the use of of_node_put() to __free(device_node) (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix trivial whitespace/coding style issues (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use max-rx-timeout-ms from devicetree (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove const from transport descriptors (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Simplify with scoped for each OF child loop (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Update various protocols versions (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove legacy transport-layer code (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make VirtIO transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make OPTEE transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make SMC transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make MBOX transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for standalone transport drivers (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Introduce packet handling helpers (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Introduce setup_shmem_iomap (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix double free in OPTEE transport (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix voltage description in failure cases (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix incorrect error propagation in scmi_voltage_descriptors_get (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support to reset the debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Create debugfs files for SCMI communication debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Track basic SCMI communication debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for debug metrics at the interface (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove superfluous handle_to_scmi_info (Steve Dunnagan) [RHEL-65607]
  - firmware/smccc: Call arch-specific hook on discovering KVM services (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for platform to agent channel completion (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for system suspend in power control driver (Steve Dunnagan) [RHEL-65607]
  - firmware: smccc: Export revision soc_id function (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Avoid non-constant printk format strings (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use dev_err_probe to bail out (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix struct kernel-doc warnings in optee transport (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make scmi_bus_type const (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix double free in SMC transport cleanup path (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add multiple protocols registration support (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace asm-generic/bug.h with linux/bug.h (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Convert to platform remove callback returning void (Steve Dunnagan) [RHEL-65607]
  - pmdomain: arm_scmi: Move Kconfig options to the pmdomain subsystem (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Move power-domain driver to the pmdomain dir (Steve Dunnagan) [RHEL-65607]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-583.el9]
changelog:
  - Revert "io_uring/uring_cmd: defer SQE copying until it's needed" (Jeff Moyer) [RHEL-82695] {CVE-2025-21837}
  - s390/dasd: Remove DMA alignment (Mete Durlu) [RHEL-88820]
  - ALSA: update RHEL kconfigs for 6.13 upstream code (Jaroslav Kysela) [RHEL-80681]
  - ASoC: use playback_only/capture_only instead dpcm_playback/dpcm_capture flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tegra: Fix ADX S24_LE audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: simple-card-utils: fix priv->dai_props indexing (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/realtek: Fix volume adjustment issue on Lenovo ThinkBook 16P Gen5 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l43: Add codec force suspend/resume ops (Jaroslav Kysela) [RHEL-80681]
  - ALSA: doc: Add codecs/index.rst to top-level index (Jaroslav Kysela) [RHEL-80681]
  - ALSA: doc: cs35l56: Add information about Cirrus Logic CS35L54/56/57 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: samsung: Add missing selects for MFD_WM8994 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: es8316: Fix HW rate calculation for 48Mhz MCLK (Jaroslav Kysela) [RHEL-80681]
  - ASoC: wm8994: Add depends on MFD core (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas2781: Fix occasional calibration failture (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Adjust ANA_MICBIAS to reduce pop noise (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: fix remaining descriptor races in sound/core/compress_offload.c (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Drop unneeded no_free_ptr() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Ignore SUBSYS_ID not found for tas2563 projects (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: improve file descriptors installation for dma-buf (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: use safe list iteration in snd_compr_task_seq() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: import DMA_BUF namespace (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: avoid 64-bit get_user() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: wcd937x: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Fix error code tas2781_read_acpi() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Show the codec quirk info at probing (Jaroslav Kysela) [RHEL-80681]
  - ALSA: asihpi: Remove unused variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Add speaker id check for ASUS projects (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: dapm: Add location information for dapm-graph tool (Jaroslav Kysela) [RHEL-80681]
  - ASoC: apple: Fix the wrong format specifier (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: fix dead hyperlink to Intel HD-Audio spec (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ac97: bus: Fix the mistake in the comment (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: Fix build dependencies for `SND_SOC_AMD_PS` (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Poll jack events for LS7A HD-Audio (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ump: Fix the wrong format specifier (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi-intel-lnl-match: add rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: stm32: dfsdm: change rate upper limits (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: fix uninitialized variable refence (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: simple-mux: add idle-state property (Jaroslav Kysela) [RHEL-80681]
  - ASoc: simple-mux: add idle-state support (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Minor formatting fixups in sdw.h header (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Update the includes on the sdw.h header (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: remove redundant assignment to variable ret (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdca: test adev before calling acpi_dev_for_each_child (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: fix the pcm device numbering for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add soundwire machine driver for legacy stack (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: move get_acp63_cpu_pin_id() to common file (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: add soundwire machines for acp6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add RT711, RT714 & RT1316 support for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add rt722 based soundwire machines (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Add missing descriptions in structs (Jaroslav Kysela) [RHEL-80681]
  - ALSA: pcm: Define snd_pcm_mmap_data_{open|close}() locally (Jaroslav Kysela) [RHEL-80681]
  - ALSA: tidyup SNDRV_PCM_TRIGGER_xxx numbering (Jaroslav Kysela) [RHEL-80681]
  - ASoC: simple-card-utils: care simple_util_dai for dummy DAI (Jaroslav Kysela) [RHEL-80681]
  - ASoC: test-component: Support continuous rates for test component (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Add headphone mixer switch (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Add left/right DAC volume control (Jaroslav Kysela) [RHEL-80681]
  - ASoc: SOF: ipc4-pcm: fix uninit-value in sof_ipc4_pcm_dai_link_fixup_rate (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Remove duplicate DACs (Jaroslav Kysela) [RHEL-80681]
  - ASoC: machine: update documentation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sm8250: add handling of secondary MI2S clock (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ump: remove unnecessary check on blk (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: Revert make SND_SOC_ACPI_INTEL_MATCH depend on ACPI (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: Only select SND_SOC_SDCA if ACPI is enabled (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: Fix invalid logical judgement (Jaroslav Kysela) [RHEL-80681]
  - ASoC: ux500: Remove redundant casts (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: handle only paused streams in hda_dai_suspend() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: Add support for persistent Code Loader DMA buffers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda-stream: Always use at least two BDLE for transfers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc3-loader: 'Handle' PROBE_INFO ext_manifest type when parsing (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ext_manifest: Add missing ext_manifest type for PROBE_INFO (Jaroslav Kysela) [RHEL-80681]
  - ASoC: da7213: Extend support for the MCK in range [2, 50] MHz (Jaroslav Kysela) [RHEL-80681]
  - ASoC: da7213: Avoid setting PLL when closing audio stream (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: Add driver for Iron Device SMA1307 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: irondevice,sma1307: Add initial DT (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: select SND_SOC_SDCA by SND_SOC_ACPI_INTEL_SDCA_QUIRKS (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: make SND_SOC_ACPI_INTEL_MATCH depend on ACPI (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Use runtime pointer in snd_compr_poll() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: change interrupt mask from XU to GE (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt722: change the interrupt mask for jack type detection (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sc8280xp Add SM8750 sound card (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: qcom,sm8250: Add SM8750 sound card (Jaroslav Kysela) [RHEL-80681]
  - ASoC: bcm63xx-pcm-whistler: fix uninit-value in i2s_dma_isr (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: x1e80100: Support boards with two speakers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Reduce pop noise (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: Fix for ACP SOF dmic tplg component load failure (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Fix unused variable warning (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: intel: Switch to pci_alloc_irq_vectors API (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: intel: Don't free interrupt when suspending (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cleanup function parameter for rtd and its id (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-core: do rtd->id trick at snd_soc_add_pcm_runtime() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: generic: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sh: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: meson: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rename rtd->num to rtd->id (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add aw88081 amplifier driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add schema for "awinic,aw88081" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: Update stream_name in dai_links structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils/intel/amd: refactor dai link init logic (Jaroslav Kysela) [RHEL-80681]
  - mfd: cs42l43: Disable IRQs during suspend (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: update clock api details (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: wcd937x: Remove unused of_gpio.h (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Remove unused including <linux/version.h> (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: add powerdown gpio (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: drop patform_data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: document the adau1373 Codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: add some kconfig text (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: remove incorrect of_match_ptr() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: Add toctree index entry for co-processor acceleration API (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: compress-accel: Format state machine flowchart as code block (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Modify the configuration of and micbias (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-devres: Remove unused devm_snd_soc_register_dai (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: add mic function (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: introduce accel operation mode (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: leverage ring sense IRQs to correctly detect headsets (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Add new codec driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: fix rt_sdca_index_update_bits function parameter description (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: support allwinner H616 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: Add playback only flag to quirks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: Add support for different DAC FIFOC addresses to quirks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: fix error code in ntp8835_i2c_probe() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-pcm: merge DPCM and non-DPCM validation check (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-pcm: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-topology: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel: boards: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-compress: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-core: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: samsung: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sof: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: core: Add fw, tplg and ipc type override parameters (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: sof-of-dev: add parameter to override tplg/fw_filename (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: core: Add debug module parameters to set IPC and boot timeout (Jaroslav Kysela) [RHEL-80681]
  - ASoC: uniphier: Handle regmap_write errors in aio_iecout_set_enable() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl_xcvr: reset RX dpath after wrong preamble (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl_xcvr: enable interrupt of cmdc status update (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tegra: Add support for S24_LE audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1372: add match table (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-utils: Remove PAGE_SIZE compile-time constant assumption (Jaroslav Kysela) [RHEL-80681]
  - ASoC: nau8821: check regmap_raw_read/regmap_raw_write for failure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: Add stream name to ACP PDM DMIC devices (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rx651: Use card->dev in replace of the &pdev->dev argument in the dev_err function (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: use machine_check() for SoundWire (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi: add is_device_rt712_vb() helper (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: add SmartMic DAI for RT713 VB (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: add SmartMic DAI for RT712 VB (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt712-sdca: detect the SMART_MIC function during the probe stage (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-acpi: introduce new 'machine check' callback (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: add quirk function for RT712_VB match (Jaroslav Kysela) [RHEL-80681]
  - soundwire: slave: lookup SDCA version and functions (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: add initial module (Jaroslav Kysela) [RHEL-80681]
  - ASoC/soundwire: remove sdw_slave_extended_id (Jaroslav Kysela) [RHEL-80681]
  - soundwire: sdw_intel: include linux/acpi.h (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Remove unneeded semicolon (Jaroslav Kysela) [RHEL-80681]
  - ASoC: makes snd_soc_set_runtime_hwparams() inline (Jaroslav Kysela) [RHEL-80681]
  - mfd: cs42l43: Fix issues in probe error paths (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: Enhance switch case to prevent uninitialized variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Fix all stream interrupts definition (Jaroslav Kysela) [RHEL-80681]
  - ASoC/SoundWire: Intel: lnl: enable interrupts after first power-up/before last power-down (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda-mlink: expose unlocked interrupt enable routine (Jaroslav Kysela) [RHEL-80681]
  - ASoC: imx-card: Add CS42888 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: imx-card: Set mclk for codec (Jaroslav Kysela) [RHEL-80681]
  - ALSA: usb-audio: Use snprintf instead of sprintf in build_mixer_unit_ctl (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put (Jaroslav Kysela) [RHEL-80681]
  - ALSA: firewire: Remove unused cmp_connection_update (Jaroslav Kysela) [RHEL-80681]
  - soundwire: cadence: add soft-reset on startup (Jaroslav Kysela) [RHEL-80681]
  - soundwire: cadence: clear MCP BLOCK_WAKEUP in init (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Clean logically deadcode in rt721-sdca.c (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sm8250: correct typo in shutdown function name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Add rt721-sdca support for PTL platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Add helper function to print the module's in/out audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Concentrate prints inside of sof_ipc4_init_output_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Use local variables in sof_ipc4_init_output_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Simplify code to deal with process modules without output (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Simplify match format print in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Remove redundant check in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Use local variables in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Drop the 'index' from 'Pin index' of format print (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Fix issue of warning message (Jaroslav Kysela) [RHEL-80681]
  - ALSA: aica: Remove unused variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: dbri: Fix formatting issue in dbri.c (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Fix mixed declarations and code warning (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Return ENOSPC for out-of-bounds flash writes (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Simplify linked channel handling (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Add support for device map retrieval (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Fix redeclaration of loop variable (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Add RT721 SDCA driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: Common functions for Realtek soundwire driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Add rt721 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel/sdw_utils: refactor RT multifunction sdca speaker codecs (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: fsl_qmc_audio: Remove the logging when parsing channels (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tlv320adc3xxx: Fix unsigned int compared against 0 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: uniphier: Handle regmap_write errors in aio_src_set_param() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: sof_rt5682: Add support for ptl_max98360a_rt5682 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sh: rz-ssi: Use SSIFCR_FIFO_RST macro (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add support for DP0/DPn 'lane-list' property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi_disco: add support for clock-scales property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add error handling for property array read (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add support for peripheral channelprepare timeout (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add new properties from 2.0 spec (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add comment on DP0-supported property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: remove DPn audio-modes (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi_disco: add MIPI-specific property_read_bool() helpers (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_stream_runtime memory layout (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_master_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_bus structure (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_slave_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_dp0_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_dpn_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Correct some typos in comments (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: amd: pass acp_rev as soundwire resource data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: pass acp pci revision id as soundwire resource data (Jaroslav Kysela) [RHEL-80681]
  - soundwire: amd: pass acp pci revision id as resource data (Jaroslav Kysela) [RHEL-80681]
  - soundwire: amd: refactor existing code for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: wcd9335: remove unnecessary MODULE_ALIAS() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: drop bogus NULL check from i2s_irq_handler (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: fix the range of patch code address (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: aw88399: Fix spelling mistake "unsupport" -> "unsupported" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: Use maple tree register cache (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas5805m: Improve a size determination in tas5805m_i2c_probe() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: bcm2835-i2s: Use maple tree register cache (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: reads patch code from firmware file (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: aw88395: Fix spelling mistake "unsupport" -> "unsupported" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas2781: Fix redundant parameter assignment (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc3: Use standard dev_dbg API (Jaroslav Kysela) [RHEL-80681]
  - ASoC: constify snd_soc_component_driver struct (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: remove unused variable from acp platform driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: replace adata->platform conditional check (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: remove unused variable from acp_card_drvdata structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: update mach_params subsystem_rev field (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: pass acp pci revision id as platform data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: store acp pci rev id in platform driver private structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: use acp pci revision id for platform differntiation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: use acp_rev for platform specific conditional checks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: simplify platform conditional checks code (Jaroslav Kysela) [RHEL-80681]
  - ASoC: stm: fix macro definition on STM_SAI_HAS_EXT_SYNC (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_dai_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_link_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_component_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: improve macro definition on TWL4030_OUTPUT_PGA (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: mchp-spdiftx: Remove interface name from stream_name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: mchp-spdifrx: Remove interface name from stream_name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: atmel_ssc_dai: Drop S24_LE support due to single channel limitation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: atmel_ssc_dai: Add stream names (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity NTP8835 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add NeoFidelity NTP8835 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add NeoFidelity NTP8918 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity NTP8918 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity Firmware helpers (Jaroslav Kysela) [RHEL-80681]
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Jaroslav Kysela) [RHEL-80681]
  - loop: Fix use-after-free issues (Ming Lei) [RHEL-87488]
  - blk-cgroup: Fix class @block_class's subsystem refcount leakage (Ming Lei) [RHEL-81398] {CVE-2025-21745}
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-80794]
  - treewide: Switch/rename to timer_delete[_sync]() (Kamal Heib) [RHEL-83218]
  - RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (Kamal Heib) [RHEL-83218]
  - rdma/cxgb4: Prevent potential integer overflow on 32bit (Kamal Heib) [RHEL-83218]
  - RDMA/cxgb4: Dump vendor specific QP details (Kamal Heib) [RHEL-83218]
  - xfrm: Fix the usage of skb->sk (Sabrina Dubroca) [RHEL-84576]
  - xfrm: delete intermediate secpath entry in packet offload mode (Sabrina Dubroca) [RHEL-84576]
  - xfrm: state: fix out-of-bounds read during lookup (Sabrina Dubroca) [RHEL-84576]
  - configs: add redhat/configs/common/generic/CONFIG_OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - redhat: make ENABLE_WERROR enable also OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - objtool: Add CONFIG_OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - objtool: Create backup on error and print args (Joe Lawrence) [RHEL-85302]
  - objtool: Change "warning:" to "error:" for --Werror (Joe Lawrence) [RHEL-85302]
  - objtool: Add --Werror option (Joe Lawrence) [RHEL-85302]
  - objtool: Use O_CREAT with explicit mode mask (Joe Lawrence) [RHEL-85302]
  - objtool: Add --output option (Joe Lawrence) [RHEL-85302]
  - objtool: Fix error handling inconsistencies in check() (Joe Lawrence) [RHEL-85302]
  - x86/smp: Fix mwait_play_dead() and acpi_processor_ffh_play_dead() noreturn behavior [partial 2] (Joe Lawrence) [RHEL-85302]
  - virtgpu: don't reset on shutdown (Eric Auger) [RHEL-331]
  - virtio: break and reset virtio devices on device_shutdown() (Eric Auger) [RHEL-331]
  - efi: pstore: Return proper errors on UEFI failures (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Request at most 512 bytes for variable names (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Allow dynamic initialization based on module parameter (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Add module parameter for setting the record size (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Omit efivars caching EFI varstore access layer (Lenny Szubowicz) [RHEL-2564]
  - efi: vars: Add thin wrapper around EFI get/set variable interface (Lenny Szubowicz) [RHEL-2564]
  - efi: vars: Don't drop lock in the middle of efivar_init() (Lenny Szubowicz) [RHEL-2564]
  - pstore: Add priv field to pstore_record for backend specific use (Lenny Szubowicz) [RHEL-2564]
  - selftests/sgx: Fix an enclave built with extended instructions (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Fix size overflows in sgx_encl_create() (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Use vmalloc_array() instead of vmalloc() (Vladis Dronov) [RHEL-86442]
  - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88830]
  - ALSA: hda/tas2781: Fix index issue in tas2781 hda SPI driver (CKI Backport Bot) [RHEL-81726]
  - ALSA: hda/tas2781: Update tas2781 hda SPI driver (CKI Backport Bot) [RHEL-81726]
  - nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() (Benjamin Coddington) [RHEL-87724]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-584.el9]
changelog:
  - net: warn if NAPI instance wasn't shut down (Davide Caratti) [RHEL-77816]
  - net: hide the definition of dev_get_by_napi_id() (Davide Caratti) [RHEL-77816]
  - net: page_pool: don't try to stash the napi id (Davide Caratti) [RHEL-77816]
  - xsk: Bring back busy polling support (Davide Caratti) [RHEL-77816]
  - net: Make napi_hash_lock irq safe (Davide Caratti) [RHEL-77816]
  - netdev: prevent accessing NAPI instances from another namespace (Davide Caratti) [RHEL-77816] {CVE-2025-21659}
  - netdev-genl: Hold rcu_read_lock in napi_set (Davide Caratti) [RHEL-77816]
  - mlx4: Add support for persistent NAPI config to RX CQs (Davide Caratti) [RHEL-77816]
  - mlx5: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
  - bnxt: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
  - netdev-genl: Support setting per-NAPI config values (Davide Caratti) [RHEL-77816]
  - net: napi: Add napi_config (Davide Caratti) [RHEL-77816]
  - netdev-genl: Dump gro_flush_timeout (Davide Caratti) [RHEL-77816]
  - net: napi: Make gro_flush_timeout per-NAPI (Davide Caratti) [RHEL-77816]
  - netdev-genl: Dump napi_defer_hard_irqs (Davide Caratti) [RHEL-77816]
  - net: napi: Make napi_defer_hard_irqs per-NAPI (Davide Caratti) [RHEL-77816]
  - x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-88224]
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-88224]
  - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-88224]
  - x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-88224]
  - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Waiman Long) [RHEL-88224]
  - x86/bugs: Skip RSB fill at VMEXIT (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Waiman Long) [RHEL-88224]
  - x86/bugs: Fix handling when SRSO mitigation is disabled (Waiman Long) [RHEL-88224]
  - x86/bugs: Add missing NO_SSB flag (Waiman Long) [RHEL-88224]
  - Documentation/srso: Document a method for checking safe RET operates properly (Waiman Long) [RHEL-88224]
  - redhat/configs: Add new CONFIG_MITIGATION_* kconfig files (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for GDS (Waiman Long) [RHEL-88224]
  - x86/bugs: Remove GDS Force Kconfig option (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for SSB (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for Spectre V2 (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for SRBDS (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for Spectre v1 (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for RETBLEED (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for L1TF (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for MMIO Stable Data (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for TAA (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for MDS (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Flip the /proc/cpuinfo appearance logic (Waiman Long) [RHEL-88224]
  - x86/bugs: Add 'spectre_bhi=vmexit' cmdline option (Waiman Long) [RHEL-88224]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
  - x86/cpu: Use EXPORT_PER_CPU_SYMBOL_GPL() for x86_spec_ctrl_current (Waiman Long) [RHEL-88224]
  - linux/dim: Fix divide by 0 in RDMA DIM (CKI Backport Bot) [RHEL-80826] {CVE-2022-49670}
  - scsi: megaraid_sas: Driver version update to 07.734.00.00-rc1 (Chandrakanth Patil) [RHEL-80700]
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [RHEL-80700]
  - scsi: megaraid_sas: Make most module parameters static (Chandrakanth Patil) [RHEL-80700]
  - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-88421]
  - ibmvnic: Don't reference skb after sending to VIOS (Mamatha Inamdar) [RHEL-83359] {CVE-2025-21855}
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition (CKI Backport Bot) [RHEL-88783] {CVE-2025-22056}
  - iommu/amd: Fix header file (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Fix possible circular locking dependency (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add the document for Intel IOMMU debugfs (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Jerry Snitselaar) [RHEL-78704]
  - drm/tegra: Fix NULL vs IS_ERR() check in probe() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_iommu_drain_pasid_prq() cover faults for RID (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix a spelling error (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix potential memory leak in iopf_queue_remove_device() (Jerry Snitselaar) [RHEL-78704]
  - iommu/hyper-v: Don't assume cpu_possible_mask is dense (Jerry Snitselaar) [RHEL-78704]
  - iommufd: Keep OBJ/IOCTL lists in an alphabetical order (Jerry Snitselaar) [RHEL-78705]
  - iommufd: Deal with IOMMU_HWPT_FAULT_ID_VALID in iommufd core (Jerry Snitselaar) [RHEL-78708]
  - iommufd/selftest: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78708]
  - iommu/amd: Fully decode all combinations of alloc_paging_flags (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Move the nid to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Change amd_iommu_pgtable to use enum protection_domain_mode (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove type argument from do_iommu_domain_alloc() and related (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove dev == NULL checks (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove unused amd_iommu_domain_update() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: remove return value of amd_iommu_detect (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove amd_iommu_apply_erratum_63() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Modify clear_dte_entry() to avoid in-place update (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce helper function get_dte256() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce helper function to update 256-bit DTE (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Misc ACPI IVRS debug info clean up (Jerry Snitselaar) [RHEL-75906]
  - iommu/vt-d: Link cache tags of same iommu unit together (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove iommu cap audit (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Jerry Snitselaar) [RHEL-78704]
  - iommu: Use str_enable_disable-like helpers (Jerry Snitselaar) [RHEL-78704]
  - lib/string_choices: Add some comments to make more clear for string choices helpers. (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Introduce several opposite string choice helpers (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Add str_true_false()/str_false_true() helper (Jerry Snitselaar) [RHEL-78705]
  - string_choices: Add wrapper for str_down_up() (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Add str_up_down() helper (Jerry Snitselaar) [RHEL-78705]
  - iommu: Remove the remove_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78705]
  - iommu: Detaching pasid by attaching to the blocked_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu: Consolidate the ops->remove_dev_pasid usage into a helper (Jerry Snitselaar) [RHEL-78704]
  - iommu: Prevent pasid attach if no ops->remove_dev_pasid (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Add missing #include of linux/string_choices.h (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Use str_read_write helper w/ logs (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add way to debug pgtable walk (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Re-use the pgtable walk for iova_to_phys (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Make pgtable walker more generic (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Add ACTLR data and support for qcom_smmu_500 (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Introduce ACTLR custom prefetcher settings (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Add support for PRR bit setup (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Refactor qcom_smmu structure to include single pointer (Jerry Snitselaar) [RHEL-78705]
  - redhat/configs: enable ARM_SMMU_MMU_500_CPRE_ERRATA (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Re-enable context caching in smmu reset operation (Jerry Snitselaar) [RHEL-78705]
  - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix cfg reading in arm_lpae_concat_mandatory() (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add coverage for different OAS in selftest (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix stage-2 concatenation with 16K (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Make domain_alloc_paging_flags() directly determine the S1/S2 (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Remove arm_smmu_domain_finalise() during attach (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Document SVA interaction with new pagetable features (Jerry Snitselaar) [RHEL-78705]
  - arm64: add stubs for system_supports_poe and system_supports_gcs (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmuv3: Update comments about ATS and bypass (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Log better event records (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_event (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible (Jerry Snitselaar) [RHEL-78705]
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Avoid draining PRQ in sva mm release path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add lockdep asserts for domain->dev_list (Jerry Snitselaar) [RHEL-78704]
  - scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Improve uAPI comment for IOMMU_HW_INFO_TYPE_ARM_SMMUV3 (Jerry Snitselaar) [RHEL-78705]
  - iommufd/selftest: Cover IOMMU_FAULT_QUEUE_ALLOC in iommufd_fail_nth (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Fix typos in kernel-doc comments (Jerry Snitselaar) [RHEL-78708]
  - iommu: Rename ops->domain_alloc_user() to domain_alloc_paging_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Add ops->domain_alloc_nested() (Jerry Snitselaar) [RHEL-78704]
  - scatterlist: fix a typo (Jerry Snitselaar) [RHEL-78704]
  - kmemleak: iommu/iova: fix transient kmemleak false positive (Jerry Snitselaar) [RHEL-78704]
  - iommu: Make set_dev_pasid op support domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Make set_dev_pasid() op support replace (Jerry Snitselaar) [RHEL-78705]
  - iommu/vt-d: Add set_dev_pasid callback for nested domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make identity_domain_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_svm_set_dev_pasid() support domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Limit intel_iommu_set_dev_pasid() for paging domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_iommu_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add iommu_domain_did() to get did (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Consolidate the struct dev_pasid_info add/remove (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add pasid replace helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refactor the pasid setup helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add a helper to flush cache for updating present pasid entry (Jerry Snitselaar) [RHEL-78704]
  - iommu: Pass old domain to set_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drain PRQs when domain removed from RID (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drop pasid requirement for prq initialization (Jerry Snitselaar) [RHEL-78704]
  - iommufd: Enable PRI when doing the iommufd_hwpt_alloc (Jerry Snitselaar) [RHEL-78708]
  - iommu/vt-d: Move IOMMU_IOPF into INTEL_IOMMU (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove the pasid present check in prq_event_thread (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Separate page request queue from SVM (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drop s1_pgtbl from dmar_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove unused dmar_msi_read (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Increase buffer size for device name (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Use PCI_DEVID() macro (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refine intel_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refactor first_level_by_default() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_update_iommu_superpage() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_update_iommu_cap() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Enhance compatibility check for paging domain attach (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove unused domain_alloc callback (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add domain_alloc_paging support (Jerry Snitselaar) [RHEL-78704]
  - iommu/iova: Fix typo 'adderss' (Jerry Snitselaar) [RHEL-78704]
  - iommu: Create __iommu_alloc_identity_domain() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Put domain allocation in __iommu_group_alloc_blocking_domain() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Put list_add/del(dev_data) back under the domain->lock (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Improve amd_iommu_release_device() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add ops->release_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Reorder attach device code (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Convert dev_data lock from spinlock to mutex (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Rearrange attach device code (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Reduce domain lock scope in attach device path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Do not detach devices in domain free path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove unused amd_iommus variable (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: xarray to track protection_domain->iommu list (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove protection_domain.dev_cnt variable (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Use ida interface to manage protection domain ID (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Fix corruption when mapping large pages from 0 (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Do not try copy old DTE resume path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Use atomic64_inc_return() in iommu.c (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Implement global identity domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Enhance amd_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Pass page table type as param to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Separate page table setup from domain allocation (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Move V2 page table support check to early_amd_iommu_init() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add helper function to check GIOSUP/GTSUP (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Enhance domain_alloc_user() to allocate PASID capable domain (Jerry Snitselaar) [RHEL-78705]
  - iommu: Add new flag to explictly request PASID capable domain (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix prototype of iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Introduce iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Refactor __iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - remoteproc: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - drm/nouveau/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - gpu: host1x: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - drm/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Restore iommu_flush_iotlb_all() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove useless flush from iommu_create_device_direct_mappings() (Jerry Snitselaar) [RHEL-78704]
  - iommu/sysfs: constify the class struct (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove iommu_present() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Reorganize kerneldoc parameter names (Jerry Snitselaar) [RHEL-78704]
  - iommu: Make bus_iommu_probe() static (Jerry Snitselaar) [RHEL-78704]
  - iommu: Add a kdoc to iommu_unmap() (Jerry Snitselaar) [RHEL-78704]
  - iommu/io-pgtable-arm: Remove split on unmap behavior (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add self test for the last page in the IAS (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Import IOMMUFD module namespace (Jerry Snitselaar) [RHEL-55204]
  - iommufd: IOMMU_IOAS_CHANGE_PROCESS selftest (Jerry Snitselaar) [RHEL-78708]
  - selftests: iommu: Use installed kernel headers search path (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Add IOMMU_IOAS_CHANGE_PROCESS (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Lock all IOAS objects (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Export do_update_pinned (Jerry Snitselaar) [RHEL-78708]
  - iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Use S2FWB for NESTED domains (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Expose the arm_smmu_attach interface (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT (Jerry Snitselaar) [RHEL-55204]
  - redhat/configs: Enable CONFIG_ARM_SMMU_V3_IOMMUFD (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS (Jerry Snitselaar) [RHEL-55204]
  - ACPI/IORT: Support CANWBS memory access flag (Jerry Snitselaar) [RHEL-55204]
  - ACPICA: IORT: Update for revision E.f (Jerry Snitselaar) [RHEL-55204]
  - vfio: Remove VFIO_TYPE1_NESTING_IOMMU (Jerry Snitselaar) [RHEL-78708]
  - Documentation: userspace-api: iommufd: Update vDEVICE (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add mock_viommu_cache_invalidate (Jerry Snitselaar) [RHEL-73590]
  - iommufd/viommu: Add iommufd_viommu_find_dev helper (Jerry Snitselaar) [RHEL-73590]
  - iommu: Add iommu_copy_struct_from_full_user_array helper (Jerry Snitselaar) [RHEL-73590]
  - iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE (Jerry Snitselaar) [RHEL-73590]
  - iommu/viommu: Add cache_invalidate to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage (Jerry Snitselaar) [RHEL-73590]
  - iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl (Jerry Snitselaar) [RHEL-73590]
  - Documentation: userspace-api: iommufd: Update vIOMMU (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add refcount to mock_iommu_device (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested() (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add container_of helpers (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Add alloc_domain_nested op to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-55217]
  - iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Verify object in iommufd_object_finalize/abort() (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Move _iommufd_object_alloc helper to a sharable file (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Move struct iommufd_object to public iommufd header (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Allow fault reporting for non-PRI PCI devices (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Selftest coverage for IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
  - iommufd: File mappings for mdev (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Add IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
  - iommufd: pfn_reader for file mappings (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Folio subroutines (Jerry Snitselaar) [RHEL-78708]
  - iommufd: pfn_reader local variables (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Generalize iopt_pages address (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Rename uptr in iopt_alloc_iova() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: Add folio_add_pins() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: handle NULL pages in unpin_user_pages() (Jerry Snitselaar) [RHEL-78708] {CVE-2024-56612}
  - mm/gup: avoid an unnecessary allocation call for FOLL_LONGTERM cases (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: stop leaking pinned pages in low memory conditions (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: simplify refs in memfd_alloc_folio (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: fix memfd_pin_folios alloc race panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49872}
  - mm/gup: fix memfd_pin_folios hugetlb page allocation (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: fix memfd_pin_folios free_huge_pages leak (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49964}
  - mm/filemap: fix filemap_get_folios_contig THP panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49873}
  - mm/gup: introduce memfd_pin_folios() for pinning memfd folios (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: introduce check_and_migrate_movable_folios() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: introduce unpin_folio/unpin_folios helpers (Jerry Snitselaar) [RHEL-78708]
  - Documentation: userspace-api: iommufd: Update HWPT_PAGING and HWPT_NESTED (Jerry Snitselaar) [RHEL-78708]
  - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: drop unneeded includes from dma-mapping.h (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: trace more error paths (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: trace dma_alloc/free direction (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: use macros to define events in a class (Jerry Snitselaar) [RHEL-78704]
  - redhat/configs: Remove CONFIG_DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: remove DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: fix physical address calculation for struct dma_debug_entry (Jerry Snitselaar) [RHEL-78708]
  - dma-debug: store a phys_addr_t in struct dma_debug_entry (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: fix a possible deadlock on radix_lock (Jerry Snitselaar) [RHEL-78704] {CVE-2024-47143}
  - docs/core-api: swiotlb: fix typos (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu: Clarify MMU-500 CPRE workaround (Jerry Snitselaar) [RHEL-78705]
  - iommu/vt-d: Cleanup apic_printk() (Jerry Snitselaar) [RHEL-78704]
  - x86/apic: Provide apic_printk() helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu: Manage driver probe deferral better (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Clean up more on probe failure (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Retire probe deferral workaround (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Make instance lookup robust (Jerry Snitselaar) [RHEL-78705]
  - kselftest/arm64: signal: drop now redundant GNU_SOURCE definition (Jerry Snitselaar) [RHEL-78704]
  - selftests: mptcp: extend CFLAGS to keep options from environment (Jerry Snitselaar) [RHEL-78704]
  - selftests: centralize -D_GNU_SOURCE= to CFLAGS in lib.mk (Jerry Snitselaar) [RHEL-78704]
  - of: address: always use dma_default_coherent for default coherency (Jerry Snitselaar) [RHEL-78704]
  - of: also handle dma-noncoherent in of_dma_is_coherent() (Jerry Snitselaar) [RHEL-78704]
  - virtio/vsock: Fix accept_queue memory leak (Jon Maloy) [RHEL-69713] {CVE-2024-53119}
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Xin Long) [RHEL-77314] {CVE-2025-21647}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CKI Backport Bot) [RHEL-86841] {CVE-2025-21993}
  - page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Høiland-Jørgensen) [RHEL-76845]
  - page_pool: Move pp_magic check into helper functions (Toke Høiland-Jørgensen) [RHEL-76845]
  - media: v4l2-mediabus: Drop V4L2_MBUS_CSI2_CONTINUOUS_CLOCK flag (Kate Hsuan) [RHEL-85049]
  - media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_CHANNEL_* flags (Kate Hsuan) [RHEL-85049]
  - media: v4l2-mediabus: Use structures to describe bus configuration (Kate Hsuan) [RHEL-85049]
  - media: v4l2-fwnode: Move bus config structure to v4l2_mediabus.h (Kate Hsuan) [RHEL-85049]
  - mm/gup: Refuse VM_PFNMAP in follow_page() (Donald Dutile) [RHEL-87404]
  - net: tun: unlink NAPI from device on destruction (CKI Backport Bot) [RHEL-80840] {CVE-2022-49672}
  - ata: libata-scsi: Improve CDL control (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Fix ata_msense_control_ata_feature() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Tomas Henzl) [RHEL-72596]
  - ata: libata-sata: Save all fields from sense data descriptor (Tomas Henzl) [RHEL-72596]
  - ata: libata: Fix NCQ Non-Data log not supported print (Tomas Henzl) [RHEL-72596]
  - ata: libata: Improve return value of atapi_check_dma() (Tomas Henzl) [RHEL-72596]
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Tomas Henzl) [RHEL-72596]
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Tomas Henzl) [RHEL-72596]
  - ata: sata_gemini: Remove unused gemini_sata_reset_bridge() (Tomas Henzl) [RHEL-72596]
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Tomas Henzl) [RHEL-72596]
  - ata: Constify struct pci_device_id (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Document all VPD page inquiry actors (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor ata_scsiop_maint_in() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor ata_scsi_simulate() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor scsi_6_lba_len() with use of get_unaligned_be24() (Tomas Henzl) [RHEL-72596]
  - ata: Fix typos in the comment (Tomas Henzl) [RHEL-72596]
  - net: fib_rules: Fix iif / oif matching on L3 master device (Antoine Tenart) [RHEL-84584]
  - net: fib_rules: annotate data-races around rule->[io]ifindex (Antoine Tenart) [RHEL-84584]
  - net: Remove likely from l3mdev_master_ifindex_by_index (Antoine Tenart) [RHEL-84584]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-585.el9]
changelog:
  - dmaengine: amd: qdma: Remove using the private get and set dma_ops APIs (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: Revert "dmaengine: qcom: bam_dma: Avoid writing unavailable register" (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Enable Function Level Reset (FLR) for halt (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Refactor halt handler (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add idxd_device_config_save() and idxd_device_config_restore() helpers (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Binding and unbinding IDXD device and driver (Jerry Snitselaar) [RHEL-78706]
  - bitmap: Define a cleanup function for bitmaps (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add idxd_pci_probe_alloc() helper (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: qcom: gpi: Add GPI immediate DMA support for SPI protocol (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: bcm2835-dma: Prevent suspend if DMA channel is busy (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: k3-udma: Add support for J722S CSI BCDMA (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: edma: make the loop condition simpler in edma_probe() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: qcom: bam_dma: Avoid writing unavailable register (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Remove unused idxd_(un)register_bus_type (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add a new IAA device ID on Panther Lake family platforms (Jerry Snitselaar) [RHEL-47414]
  - dmaengine: sh: rcar-dmac: add comment for r8a779a0 compatible (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: Move AMD PTDMA driver to amd directory (Jerry Snitselaar) [RHEL-78706]
  - redhat/configs: Add CONFIG_AMD_QDMA (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: amd: qdma: Add AMD QDMA driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Remove a useless mutex (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: fix typo in the comment (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Move DSA/IAA device IDs to IDXD driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Clean up headers (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Simplify devm_acpi_dma_controller_register() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Drop unused devm_acpi_dma_controller_free() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: rz-dmac: add r7s72100 support (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: Kconfig: Make RZ_DMAC depend on ARCH_RZG2L (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: Kconfig: Add ARCH_R9A07G054 dependency for RZ_DMAC config option (Jerry Snitselaar) [RHEL-78706]
  - nvme: print firmware bug note for non-unique identifiers (Bryan Gurney) [RHEL-89350]
  - nvme-pci: add BOGUS_NID quirk for Samsung PM1733 (Bryan Gurney) [RHEL-89350]
  - vsock: Orphan socket after transport release (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - vsock: Keep the binding until socket destruction (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - bpf, vsock: Invoke proto::close on close() (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - RDMA/rxe: Fix the qp flush warnings in req (CKI Backport Bot) [RHEL-72373] {CVE-2024-53229}
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Guillaume Nault) [RHEL-89647] {CVE-2025-37749}
  - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (David Arcari) [RHEL-81770]
  - ext4: fix OOB read when checking dotdot dir (CKI Backport Bot) [RHEL-87984] {CVE-2025-37785}
  - ionic: add module eeprom channel data to ionic_if and ethtool (Mohammad Heib) [RHEL-88150]
  - ionic: support ethtool get_module_eeprom_by_page (Mohammad Heib) [RHEL-88150]
  - ionic: extend the QSFP module sprom for more pages (Mohammad Heib) [RHEL-88150]
  - ionic: use ee->offset when returning sprom data (Mohammad Heib) [RHEL-88150]
  - ionic: no double destroy workqueue (Mohammad Heib) [RHEL-88150]
  - ionic: Fix netdev notifier unregister on failure (Mohammad Heib) [RHEL-88150]
  - ionic: remove the unused nb_work (Mohammad Heib) [RHEL-88150]
  - ionic: add support for QSFP_PLUS_CMIS (Mohammad Heib) [RHEL-88150]
  - ionic: add speed defines for 200G and 400G (Mohammad Heib) [RHEL-88150]
  - ionic: Translate IONIC_RC_ENOSUPP to EOPNOTSUPP (Mohammad Heib) [RHEL-88150]
  - ionic: Use VLAN_ETH_HLEN when possible (Mohammad Heib) [RHEL-88150]
  - ionic: add asic codes to firmware interface file (Mohammad Heib) [RHEL-88150]
  - hugetlbfs: support idmapped mounts (CKI Backport Bot) [RHEL-35573]
  - redhat: create 'systemd-volatile-overlay' addon for UKI (Emanuele Giuseppe Esposito) [RHEL-86487]
  - efi: Fix building of efi-pstore when CONFIG_EFI_VARS_PSTORE=m (Lenny Szubowicz) [RHEL-90260]
  - ACPI: processor idle: Revert "avoid call to raw_local_irq_disable() from acpi_safe_halt()" (Waiman Long) [RHEL-22238]
  - ACPI/HMAT: Move HMAT messages to pr_debug() (Steve Dunnagan) [RHEL-70321]
  - cpufreq: Reference count policy in cpufreq_update_limits() (David Arcari) [RHEL-67849]
  - cpufreq/amd-pstate: Use scope based cleanup for cpufreq_policy refs [partial] (David Arcari) [RHEL-67849]
  - platform/x86/amd: amd_3d_vcache: Add sysfs ABI documentation (David Arcari) [RHEL-67849]
  - platform/x86/amd: amd_3d_vcache: Add AMD 3D V-Cache optimizer driver (David Arcari) [RHEL-67849]
  - redhat/configs: enable CONFIG_AMD_3D_VCACHE for x86 on RHEL (David Arcari) [RHEL-67849]
  - enic: get max rq & wq entries supported by hw, 16K queues (Nelson Escobar) [RHEL-84862]
  - enic: cleanup of enic wq request completion path (Nelson Escobar) [RHEL-84862]
  - enic: added enic_wq.c and enic_wq.h (Nelson Escobar) [RHEL-84862]
  - enic: remove unused function cq_enet_wq_desc_dec (Nelson Escobar) [RHEL-84862]
  - enic: enable rq extended cq support (Nelson Escobar) [RHEL-84862]
  - enic: enic rq extended cq defines (Nelson Escobar) [RHEL-84862]
  - enic: enic rq code reorg (Nelson Escobar) [RHEL-84862]
  - enic: Move function from header file to c file (Nelson Escobar) [RHEL-84862]
  - enic: add dependency on Page Pool (Nelson Escobar) [RHEL-84862]
  - enic: remove copybreak tunable (Nelson Escobar) [RHEL-84862]
  - enic: Use the Page Pool API for RX (Nelson Escobar) [RHEL-84862]
  - enic: Simplify RX handler function (Nelson Escobar) [RHEL-84862]
  - enic: Move RX functions to their own file (Nelson Escobar) [RHEL-84862]
  - enic: Fix typo in comment in table indexed by link speed (Nelson Escobar) [RHEL-84862]
  - enic: Obtain the Link speed only after the link comes up (Nelson Escobar) [RHEL-84862]
  - enic: Move RX coalescing set function (Nelson Escobar) [RHEL-84862]
  - enic: Move kdump check into enic_adjust_resources() (Nelson Escobar) [RHEL-84862]
  - enic: Move enic resource adjustments to separate function (Nelson Escobar) [RHEL-84862]
  - enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (Nelson Escobar) [RHEL-84862]
  - enic: Allocate arrays in enic struct based on VIC config (Nelson Escobar) [RHEL-84862]
  - enic: Save resource counts we read from HW (Nelson Escobar) [RHEL-84862]
  - enic: Make MSI-X I/O interrupts come after the other required ones (Nelson Escobar) [RHEL-84862]
  - enic: Create enic_wq/rq structures to bundle per wq/rq data (Nelson Escobar) [RHEL-84862]
  - enic: Report some per queue statistics in ethtool (Nelson Escobar) [RHEL-84862]
  - enic: Report per queue statistics in netdev qstats (Nelson Escobar) [RHEL-84862]
  - enic: Collect per queue statistics (Nelson Escobar) [RHEL-84862]
  - enic: Use macro instead of static const variables for array sizes (Nelson Escobar) [RHEL-84862]
  - enic: add ethtool get_channel support (Nelson Escobar) [RHEL-84862]
  - enic: Validate length of nl attributes in enic_set_vf_port (Nelson Escobar) [RHEL-84862]
  - enic: Replace hardcoded values for vnic descriptor by defines (Nelson Escobar) [RHEL-84862]
  - enic: Avoid false positive under FORTIFY_SOURCE (Nelson Escobar) [RHEL-84862]
  - smb: client: Add check for next_buffer in receive_encrypted_standard() (CKI Backport Bot) [RHEL-83243] {CVE-2025-21844}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-586.el9]
changelog:
  - net: introduce per netns packet chains (Paolo Abeni) [RHEL-88921]
  - nvme: enable CONFIG_NVME_KEYRING (Maurizio Lombardi) [RHEL-72531]
  - nvmet-auth: always free derived key data (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix out-of-bounds access in nvmet_enable_port (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: cleanup link state management (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: clear CC and CSTS when disabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: always fully initialize completion entries (Maurizio Lombardi) [RHEL-72531]
  - nvmet: auth: use NULL to clear a pointer in nvmet_auth_sq_free() (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: sysfs links may not be created for devices (Maurizio Lombardi) [RHEL-72531]
  - nvme: fixup scan failure for non-ANA multipath controllers (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: take tgtport reference only once (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: update tgtport ref per assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_free_hostport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_delete_assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: add ref counting to lport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: replace kref with refcount (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: swap list_add_tail arguments (Maurizio Lombardi) [RHEL-72531]
  - nvme: multipath: fix return value of nvme_available_path (Maurizio Lombardi) [RHEL-72531]
  - nvme: re-read ANA log page after ns scan completes (Maurizio Lombardi) [RHEL-72531]
  - nvme: requeue namespace scan on missed AENs (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-72531]
  - crypto,fs: Separate out hkdf_extract() and hkdf_expand() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: disable the target pci-epf module (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip nvme_write_sq_db on empty rqlist (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Keep completion queues mapped (Maurizio Lombardi) [RHEL-72531]
  - objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace max(a, min(b, c)) by clamp(val, lo, hi) (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Always configure BAR0 as 64-bit (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Remove duplicate uuid_copy (Maurizio Lombardi) [RHEL-72531]
  - nvme: zns: Simplify nvme_zone_parse_entry() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Remove redundant 'flush_workqueue()' calls (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: Remove unused functions (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove stale comment (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: Utilise min3() to simplify queue count calculation (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for queue-depth io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for numa io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for round-robin io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tls_concat and tls_key debugfs entries (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet-tcp: support secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet: Add 'sq' argument to alloc_ctrl_args (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-fabrics: reset admin connection for secure concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-tcp: request secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-keyring: add nvme_tls_psk_refresh() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_derive_tls_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_digest() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: map uring_cmd data even if address is 0 (Maurizio Lombardi) [RHEL-72531]
  - io_uring/nvme: pass issue_flags to io_uring_cmd_import_fixed() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not add an IRQ vector if not needed (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Set NVMET_PCI_EPF_Q_LIVE when a queue is fully created (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix stuck reset on concurrent DPC and HP (Maurizio Lombardi) [RHEL-72531]
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Maurizio Lombardi) [RHEL-72531 RHEL-86914] {CVE-2025-21927}
  - nvme-tcp: Fix a C2HTermReq error message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: remove old function prototype (Maurizio Lombardi) [RHEL-72531]
  - nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: clean up CMBMSC when registering CMB fails (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix possible UAF in nvme_tcp_poll (Maurizio Lombardi) [RHEL-72531]
  - nvme: only allow entering LIVE from CONNECTING state (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: rely on state transitions to handle connectivity loss (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Support coprocessors left idle (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Release power domains when probe fails (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: add missing space in err message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Avoid RCU stalls under heavy workload (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not uselessly write the CSTS register (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Correctly initialize CSTS when enabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Fix crash when a namespace is disabled (Maurizio Lombardi) [RHEL-72531 RHEL-73614 RHEL-85327] {CVE-2025-21850}
  - nvme-tcp: add basic support for the C2HTermReq PDU (Maurizio Lombardi) [RHEL-72531]
  - nvme: make nvme_tls_attrs_group static (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add a missing endianess conversion in nvmet_execute_admin_connect (Maurizio Lombardi) [RHEL-72531]
  - nvmet: the result field in nvmet_alloc_ctrl_args is little endian (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix a memory leak in controller identify (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: do not ignore connectivity loss during connecting (Maurizio Lombardi) [RHEL-72531]
  - nvme: handle connectivity loss in nvme_set_queue_count (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: go straight to connecting state when initializing (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove redundant dma frees in hmb (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix rw control endian access (Maurizio Lombardi) [RHEL-72531]
  - nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use correct size to free the hmb buffer (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error path for xa_store in nvme_init_effects (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix comment typo (Maurizio Lombardi) [RHEL-72531]
  - nvmet: New NVMe PCI endpoint function target driver (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement arbitration feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt config feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt coalescing feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement host identifier set feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce get/set_feature controller operations (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Do not require SGL for PCI target controller commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add support for I/O queue management admin commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_sq_create() and nvmet_cq_create() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_req_transfer_len() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Improve nvmet_alloc_ctrl() interface and implementation (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add PCI transport type (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add drvdata field to struct nvmet_ctrl (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_get_cmd_effects_admin() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Export nvmet_update_cc() and nvmet_cc_xxx() helpers (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add vendor_id and subsys_vendor_id subsystem attributes (Maurizio Lombardi) [RHEL-72531]
  - nvme: Move opcode string helper functions declarations (Maurizio Lombardi) [RHEL-72531]
  - nvme: change return type of nvme_poll_cq() to bool (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error check for xa_store in nvme_get_effects_log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: handle rw's limited retry flag (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: remove nvme_tcp_destroy_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvmet-loop: avoid using mutex in IO hotpath (Maurizio Lombardi) [RHEL-72531]
  - nvmet: propagate npwg topology (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: 512 byte aligned dma pool segment quirk (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: simplify nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: no need to quiesce admin_q in nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix the memleak while create new ctrl failed (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56632}
  - nvme-pci: don't use dma_alloc_noncontiguous with 0 merge boundary (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace kmalloc + memset with kzalloc for data allocation (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove two deallocate zeroes quirks (Maurizio Lombardi) [RHEL-72531]
  - nvme: don't apply NVME_QUIRK_DEALLOCATE_ZEROES when DSM is not supported (Maurizio Lombardi) [RHEL-72531]
  - nvmet: use kzalloc instead of ZERO_PAGE in nvme_execute_identify_ns_nvm() (Maurizio Lombardi) [RHEL-72531]
  - nvme: tuning pr code by using defined structs and macros (Maurizio Lombardi) [RHEL-72531]
  - nvme: introduce change ptpl and iekey definition (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tracing of reservation commands (Maurizio Lombardi) [RHEL-72531]
  - nvme: parse reservation commands's action and rtype to string (Maurizio Lombardi) [RHEL-72531]
  - nvmet: report ns's vwc not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: check ns's volatile write cache not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: add rotational support (Maurizio Lombardi) [RHEL-72531]
  - nvme: use command set independent id ns if available (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support for csi identify ns (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement rotational media information log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement endurance groups (Maurizio Lombardi) [RHEL-72531]
  - nvmet: declare 2.1 version compliance (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement crto property (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported features log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported log pages (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement active command set ns list (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement id ns for nvm command set (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support reservation feature (Maurizio Lombardi) [RHEL-72531]
  - nvme-core: remove repeated wq flags (Maurizio Lombardi) [RHEL-72531]
  - nvmet: make nvmet_wq visible in sysfs (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use dma_alloc_noncontigous if possible (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix freeing of the HMB descriptor table (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56756}
  - nvme: re-fix error-handling for io_uring nvme-passthrough (Maurizio Lombardi) [RHEL-72531]
  - nvme: module parameter to disable pi with offsets (Maurizio Lombardi) [RHEL-72531]
  - nvme: enhance cns version checking (Maurizio Lombardi) [RHEL-72531]
  - vfs: fix race between evice_inodes() and find_inode()&iput() (CKI Backport Bot) [RHEL-63193] {CVE-2024-47679}
  - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-86831]
  - proc: fix UAF in proc_get_inode() (Ian Kent) [RHEL-86809] {CVE-2025-21999}
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (David Marlin) [RHEL-87889] {CVE-2025-21969}
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CKI Backport Bot) [RHEL-87889] {CVE-2025-21969}
  - scsi: mpi3mr: Event processing debug improvement (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Add level check to control event logging (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Reset the pending interrupt flag (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix pending I/O counter (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Task Abort EH Support (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.13.0.5.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Check admin reply queue from Watchdog (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update timestamp only for supervisor IOCs (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update MPI Headers to revision 35 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix locking in an error path (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix spelling mistake "skiping" -> "skipping" (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.12.1.0.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page1: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page0: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_pcie_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_sas_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (CKI Backport Bot) [RHEL-79805]
  - PCI: Use downstream bridges for distributing resources (Myron Stowe) [RHEL-73396]
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Gavin Shan) [RHEL-87960]
  - s390/qdio: Move memory alloc/pointer arithmetic for slib and sl into one place (Mete Durlu) [RHEL-73492]
  - s390/qdio: Rename feature flag aif_osa to aif_qdio (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Clarify zfcp_port refcount ownership during "link" test (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Correct kdoc parameter description for sending ELS and CT (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Switch over to sysfs_emit() (Mete Durlu) [RHEL-73492]
  - s390: Add z17 elf platform (Mete Durlu) [RHEL-89726]
  - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-89579]
  - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-89579]
  - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-89579]
  - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-89579]
  - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-89579]
  - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-89579]
  - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-89579]
  - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-89579]
  - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-89579]
  - mptcp: fix spurious wake-up on under memory pressure (Davide Caratti) [RHEL-84571]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Davide Caratti) [RHEL-84571] {CVE-2025-23145}
  - mptcp: Fix data stream corruption in the address announcement (Davide Caratti) [RHEL-84571]
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Davide Caratti) [RHEL-84571] {CVE-2025-21938}
  - mptcp: always handle address removal under msk socket lock (Davide Caratti) [RHEL-84571] {CVE-2025-21875}
  - mptcp: handle fastopen disconnect correctly (Davide Caratti) [RHEL-84571] {CVE-2025-21705}
  - mptcp: consolidate suboption status (Davide Caratti) [RHEL-84571] {CVE-2025-21707}
  - mptcp: be sure to send ack when mptcp-level window re-opens (Davide Caratti) [RHEL-84571]
  - mptcp: pm: only set fullmesh for subflow endp (Davide Caratti) [RHEL-84571] {CVE-2025-21706}
  - mptcp: hold pm lock when deleting entry (Davide Caratti) [RHEL-84571]
  - mptcp: prevent MPC handshake on port-based signal endpoints (Davide Caratti) [RHEL-84571]
  - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-81397] {CVE-2025-21764}
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Fix fifo underflow on flush (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Adjust the timeout for FIFO mode (Derek Barbosa) [RHEL-89346]
  - tty: serial: 8250: Fix another runtime PM usage counter underflow (Derek Barbosa) [RHEL-89346]
  - Flush console log from kernel_power_off() (Derek Barbosa) [RHEL-89346]
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Derek Barbosa) [RHEL-89346]
  - dev_printk: Add and use dev_no_printk() (Derek Barbosa) [RHEL-89346]
  - printk: Let no_printk() use _printk() (Derek Barbosa) [RHEL-89346]
  - printk: index: Add indexing support to dev_printk (Derek Barbosa) [RHEL-89346]
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Waiman Long) [RHEL-72448]
  - rtc: rzn1: fix BCD to rtc_time conversion errors (Waiman Long) [RHEL-72448]
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Waiman Long) [RHEL-72448] {CVE-2024-56739}
  - rtc: abx80x: Fix WDT bit position of the status register (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Waiman Long) [RHEL-72448]
  - rtc: at91sam9: fix OF node leak in probe() error path (Waiman Long) [RHEL-72448]
  - rtc: interface: Add RTC offset to alarm after fix-up (Waiman Long) [RHEL-72448]
  - rtc: abx80x: Fix return value of nvmem callback on read (Waiman Long) [RHEL-72448]
  - rtc: cmos: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: isl1208: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Waiman Long) [RHEL-72448]
  - rtc: Extend timeout for waiting for UIP to clear to 1s (Waiman Long) [RHEL-72448]
  - rtc: Add support for configuring the UIP timeout for RTC reads (Waiman Long) [RHEL-72448]
  - rtc: Adjust failure return code for cmos_set_alarm() (Waiman Long) [RHEL-72448]
  - rtc: mc146818-lib: Adjust failure return code for mc146818_get_time() (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call (Waiman Long) [RHEL-72448]
  - rtc: efi: fixed typo in efi_procfs() (Waiman Long) [RHEL-72448]
  - rtc: brcmstb-waketimer: support level alarm_irq (Waiman Long) [RHEL-72448]
  - rtc: stop warning for invalid alarms when the alarm is disabled (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: Allow to wake up system without IRQ (Waiman Long) [RHEL-72448]
  - rtc: rv8803: fix Wvoid-pointer-to-enum-cast warning (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Simplify clk handling in st_rtc_probe() (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Waiman Long) [RHEL-72448]
  - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Waiman Long) [RHEL-72448]
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public() (Guillaume Nault) [RHEL-84572]
  - net: Add non-RCU dev_getbyhwaddr() helper (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in inet_select_addr() (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in rt_is_expired() (Guillaume Nault) [RHEL-84572]
  - ipv4: add RCU protection to ip4_dst_hoplimit() (Guillaume Nault) [RHEL-84572]
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Guillaume Nault) [RHEL-84572]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-587.el9]
changelog:
  - af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer. (Davide Caratti) [RHEL-84598]
  - net/af_packet: check len when min_header_len equals to 0 (Davide Caratti) [RHEL-84598]
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57901}
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57902}
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Davide Caratti) [RHEL-84598]
  - perf trace: Add missing perf_tool__init() (Anubhav Shelat) [RHEL-83634]
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Remove unused iscsi_create_session() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: bnx2i: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Chris Leech) [RHEL-90552]
  - Revert "mm: kmemleak: alloc gray object for reserved region with direct map" (Luiz Capitulino) [RHEL-75156]
  - cifs: Fix integer overflow while processing closetimeo mount option (CKI Backport Bot) [RHEL-87899] {CVE-2025-21962}
  - cifs: Fix integer overflow while processing acregmax mount option (CKI Backport Bot) [RHEL-87920] {CVE-2025-21964}
  - net: fix geneve_opt length integer overflow (CKI Backport Bot) [RHEL-87973] {CVE-2025-22055}
  - RDMA/core: Silence oversized kvmalloc() warning (Kamal Heib) [RHEL-75591]
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Kamal Heib) [RHEL-75591]
  - RDMA/ucaps: Avoid format-security warning (Kamal Heib) [RHEL-75591]
  - IB/mad: Check available slots before posting receive WRs (Kamal Heib) [RHEL-75591]
  - RDMA/core: Pass port to counter bind/unbind operations (Kamal Heib) [RHEL-75591]
  - RDMA/core: Add support to optional-counters binding configuration (Kamal Heib) [RHEL-75591]
  - RDMA/core: Create and destroy rdma_counter using rdma_zalloc_drv_obj() (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix use-after-free when rename device name (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() (Kamal Heib) [RHEL-75591]
  - docs: infiniband: document the UCAP API (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Add support for UCAPs in context creation (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Introduce UCAP (User CAPabilities) API (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fixes infiniband sysctl bounds (Kamal Heib) [RHEL-75591]
  - RDMA/core: Don't expose hw_counters outside of init net namespace (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix best page size finding when it can cross SG entries (Kamal Heib) [RHEL-75591]
  - IB/iser: fix typos in iscsi_iser.c comments (Kamal Heib) [RHEL-75591]
  - RDMA/core: Use ib_port_state_to_str() for IB state sysfs (Kamal Heib) [RHEL-75591]
  - IB/cache: Add log messages for IB device state changes (Kamal Heib) [RHEL-75591]
  - ext4: avoid writing unitialized memory to disk in EA inodes (Brian Foster) [RHEL-86510]
  - ext4: don't track ranges in fast_commit if inode has inlined data (Brian Foster) [RHEL-86510]
  - ext4: fix possible tid_t sequence overflows (Brian Foster) [RHEL-86510]
  - ext4: use ext4_update_inode_fsync_trans() helper in inode creation (Brian Foster) [RHEL-86510]
  - ext4: use memtostr_pad() for s_volume_name (Brian Foster) [RHEL-86510]
  - ext4: warn if delalloc counters are not zero on inactive (Brian Foster) [RHEL-86510]
  - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-86510]
  - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-86510]
  - ext4: correct the hole length returned by ext4_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-86510]
  - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: propagate errors from ext4_sb_bread() in ext4_xattr_block_cache_find() (Brian Foster) [RHEL-86510]
  - jbd2: remove redundant assignement to variable err (Brian Foster) [RHEL-86510]
  - ext4: remove the redundant folio_wait_stable() (Brian Foster) [RHEL-86510]
  - ext4: fix potential unnitialized variable (Brian Foster) [RHEL-86510]
  - ext4: remove block_device_ejected() (Brian Foster) [RHEL-86510]
  - ext4: keep "prefetch_grp" and "nr" consistent (Brian Foster) [RHEL-86510]
  - ext4: replace deprecated strncpy with alternatives (Brian Foster) [RHEL-86510]
  - ext4: clean up s_mb_rb_lock to fix build warnings with C=1 (Brian Foster) [RHEL-86510]
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_show() (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_store() (Brian Foster) [RHEL-86510]
  - ext4: avoid overflow when setting values via sysfs (Brian Foster) [RHEL-86510]
  - ext4: avoid excessive credit estimate in ext4_tmpfile() (Brian Foster) [RHEL-86510]
  - ext4: remove unneeded if checks before kfree (Brian Foster) [RHEL-86510]
  - ext4: set FMODE_CAN_ODIRECT instead of a dummy direct_IO method (Brian Foster) [RHEL-86510]
  - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-83380] {CVE-2024-50301}
  - tracing/histograms: Fix memory leak problem (CKI Backport Bot) [RHEL-81008] {CVE-2022-49648}
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains (Marcin Juszkiewicz) [RHEL-92493]
  - redhat: add test_klp_kprobe to mod-internal.list (Denis Aleksandrov) [RHEL-90828]
  - vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-89689]
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (David Arcari) [RHEL-87253] {CVE-2022-3424}
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs (Herton R. Krzesinski) [RHEL-74389]
  - x86: bring back rep movsq for user access on CPUs without ERMS (Herton R. Krzesinski) [RHEL-74389]
  - io_uring: prevent opcode speculation (CKI Backport Bot) [RHEL-83230] {CVE-2025-21863}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-588.el9]
changelog:
  - scsi: mpt3sas: Fix buffer overflow in mpt3sas_send_mctp_passthru_req() (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Fix spelling mistake "receveid" -> "received" (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: update driver version to 52.100.00.00 (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Send a diag reset if target reset fails (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Report driver capability as part of IOCINFO command (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Add support for MCTP Passthrough commands (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Update MPI headers to 02.00.62 version (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Fix a locking bug in an error path (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Reduce log level of ignore_delay_remove message to KERN_INFO (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Remove unused config functions (Chandrakanth Patil) [RHEL-81907]
  - scsi: Constify struct pci_error_handlers (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Add details to EEDPTagMode error message (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Update driver version to 51.100.00.00 (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Chandrakanth Patil) [RHEL-81907]
  - Revert "cgroup: Avoid -Wstringop-overflow warnings" (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Move procfs cpuset attribute under cgroup-v1.c (Radostin Stoyanov) [RHEL-80382]
  - Revert "selftests/cgroup: Drop define _GNU_SOURCE" (Radostin Stoyanov) [RHEL-80382]
  - selftests/cgroup: Fix compile error in test_cpu.c (Radostin Stoyanov) [RHEL-80382]
  - configs: enable CPUSETS_V1 on RHEL (Radostin Stoyanov) [RHEL-80382]
  - mm: memcg: move soft limit reclaim code to memcontrol-v1.c (Radostin Stoyanov) [RHEL-80382]
  - mm: memcg: introduce memcontrol-v1.c (Radostin Stoyanov) [RHEL-80382]
  - mm: remove page_cpupid_xchg_last() (Radostin Stoyanov) [RHEL-80382]
  - mm: use folio_xchg_last_cpupid() in wp_page_reuse() (Radostin Stoyanov) [RHEL-80382]
  - mm: convert wp_page_reuse() and finish_mkwrite_fault() to take a folio (Radostin Stoyanov) [RHEL-80382]
  - mm: make finish_mkwrite_fault() static (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use folio_xchg_last_cpupid() in __split_huge_page_tail() (Radostin Stoyanov) [RHEL-80382]
  - mm: migrate: use folio_xchg_last_cpupid() in folio_migrate_flags() (Radostin Stoyanov) [RHEL-80382]
  - sched/fair: use folio_xchg_last_cpupid() in should_numa_migrate_memory() (Radostin Stoyanov) [RHEL-80382]
  - mm: add folio_xchg_last_cpupid() (Radostin Stoyanov) [RHEL-80382]
  - mm: remove xchg_page_access_time() (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use a folio in change_huge_pmd() (Radostin Stoyanov) [RHEL-80382]
  - mm: mprotect: use a folio in change_pte_range() (Radostin Stoyanov) [RHEL-80382]
  - sched/fair: use folio_xchg_access_time() in numa_hint_fault_latency() (Radostin Stoyanov) [RHEL-80382]
  - mm: add folio_xchg_access_time() (Radostin Stoyanov) [RHEL-80382]
  - mm: remove page_cpupid_last() (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use folio_last_cpupid() in __split_huge_page_tail() (Radostin Stoyanov) [RHEL-80382]
  - mm: memory: use folio_last_cpupid() in do_numa_page() (Radostin Stoyanov) [RHEL-80382]
  - mm: add folio_last_cpupid() (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use folio_last_cpupid() in do_huge_pmd_numa_page() (Radostin Stoyanov) [RHEL-80382]
  - mm_types: add virtual and _last_cpupid into struct folio (Radostin Stoyanov) [RHEL-80382]
  - Documentation/cgroup-v2: clarify that zswap.writeback is ignored if zswap is disabled (Radostin Stoyanov) [RHEL-80382]
  - selftests: test_zswap: add test for hierarchical zswap.writeback (Radostin Stoyanov) [RHEL-80382]
  - selftests: cgroup: add tests to verify the zswap writeback path (Radostin Stoyanov) [RHEL-80382]
  - selftests: fix the zswap invasive shrink test (Radostin Stoyanov) [RHEL-80382]
  - selftests: add zswapin and no zswap tests (Radostin Stoyanov) [RHEL-80382]
  - selftests: cgroup: update per-memcg zswap writeback selftest (Radostin Stoyanov) [RHEL-80382]
  - selftests: add a sanity check for zswap (Radostin Stoyanov) [RHEL-80382]
  - cgroup/rstat: Selftests for niced CPU statistics (Radostin Stoyanov) [RHEL-80382]
  - cgroup/rstat: Tracking cgroup-level niced CPU time (Radostin Stoyanov) [RHEL-80382]
  - selftests/cgroup: Drop define _GNU_SOURCE (Radostin Stoyanov) [RHEL-80382]
  - selftests: cgroup: remove redundant enabling of memory controller (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Move cpu.h include to cpuset-internal.h (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: add sefltest for cpuset v1 (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: guard cpuset-v1 code under CONFIG_CPUSETS_V1 (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: rename functions shared between v1 and v2 (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move v1 interfaces to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move validate_change_legacy to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move legacy hotplug update to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: add callback_lock helper (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move memory_spread to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move relax_domain_level to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move memory_pressure to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move common code to cpuset-internal.h (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: introduce cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Avoid -Wstringop-overflow warnings (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: add decrease attach_in_progress helpers (Radostin Stoyanov) [RHEL-80382]
  - cgroup/pids: Remove unreachable paths of pids_{can,cancel}_fork (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Expose cpuset filesystem with cpuset v1 only (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Do not report unavailable v1 controllers in /proc/cgroups (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Disallow mounting v1 hierarchies without controller implementation (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Fix potential overflow issue when checking max_depth (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Check for partition roots with overlapping CPUs (Radostin Stoyanov) [RHEL-80382]
  - cgroup: clarify css sibling linkage is protected by cgroup_mutex or RCU (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Remove cpuset_slab_spread_rotor (Radostin Stoyanov) [RHEL-80382]
  - cgroup: update some statememt about delegation (Radostin Stoyanov) [RHEL-80382]
  - redhat: configs: Enable CX231XX driver (Kate Hsuan) [RHEL-86821]
  - media: usb: usbtv: Stop direct calls to queue num_buffers field (Kate Hsuan) [RHEL-86821]
  - media: saa6752hs: Don't set format in sub-device state (Kate Hsuan) [RHEL-86821]
  - media: i2c: Use accessors for pad config 'try_*' fields (Kate Hsuan) [RHEL-86821]
  - redhat: add downstream SBAT for UKI addons (Emanuele Giuseppe Esposito) [RHEL-92594]
  - uki_addons: provide custom SBAT as input parameter (Emanuele Giuseppe Esposito) [RHEL-92594]
  - uki_addons: remove completely sbat/sbat.conf (Emanuele Giuseppe Esposito) [RHEL-92594]
  - fbdev: efifb: Change the return value type to void (Jocelyn Falempe) [RHEL-75953]
  - fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (Jocelyn Falempe) [RHEL-75953]
  - fbdev: efifb: Use devm_register_framebuffer() (Jocelyn Falempe) [RHEL-75953]
  - fbdev: Introduce devm_register_framebuffer() (Jocelyn Falempe) [RHEL-75953]
  - video: Handle HAS_IOPORT dependencies (Jocelyn Falempe) [RHEL-75953]
  - fbcon: Use oops_in_progress instead of panic_cpu (Jocelyn Falempe) [RHEL-75953]
  - fbcon: Add an option to disable fbcon in panic (Jocelyn Falempe) [RHEL-75953]
  - mm: gup: fix infinite loop within __get_longterm_locked (Waiman Long) [RHEL-89519]
  - udmabuf: fix racy memfd sealing check (Waiman Long) [RHEL-89519]
  - udmabuf: udmabuf_create pin folio codestyle cleanup (Waiman Long) [RHEL-89519]
  - udmabuf: pre-fault when first page fault (Waiman Long) [RHEL-89519]
  - selftests/udmabuf: add tests to verify data after page migration (Waiman Long) [RHEL-89519]
  - udmabuf: pin the pages using memfd_pin_folios() API (Waiman Long) [RHEL-89519]
  - docs: hugetlbpage.rst: add hugetlb migration description (Waiman Long) [RHEL-89519]
  - mm: hugetlb: make the hugetlb migration strategy consistent (Waiman Long) [RHEL-89519]
  - mm: record the migration reason for struct migration_target_control (Waiman Long) [RHEL-89519]
  - selftests: drivers/dma-buf: Improve message in selftest summary (Waiman Long) [RHEL-89519]
  - selftests: drivers/dma-buf: Fix implicit declaration warns (Waiman Long) [RHEL-89519]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-15
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook
     server certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'
    Resolves: RHEL-78057
    Resolves: RHEL-78313
    Resolves: RHEL-78316


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> 34.9.27-1
changelog:
  - New lorax documentation - 34.9.27 (bcl) (bcl)
    Related: RHEL-83208
  - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl)
    Resolves: RHEL-83208
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl)
    Resolves: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Brian C. Lane <bcl@redhat.com> - 9.7-1
changelog:
  - Bump release version to 9.7 (bcl)
    Related: RHEL-91930
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91930


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


