# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-1
changelog:
  - Bump version to 2.5.2-1
  - Resolves: RHEL-5108 - ns-slapd crash in referint_get_config
  - Resolves: RHEL-5113 - nsslapd-numlisteners limit is not enforced
  - Resolves: RHEL-5115 - `dscreate ds-root` accepts relative path
  - Resolves: RHEL-5131 - ldif2db can be very slow
  - Resolves: RHEL-5138 - Logconv.pl CSV file contains mismatched header and data columns
  - Resolves: RHEL-14760 - ns-slapd crash in vlvIndex_delete
  - Resolves: RHEL-17511 - nsslapd-idletimeout is ignored
  - Resolves: RHEL-49454 - perf search result investigation for many large static groups and members
  - Resolves: RHEL-49458 - subsuffix are not returned in one level scoped search


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-2
changelog:
  - Bump version to 2.5.2-2
  - Resolves: RHEL-55744 - ipahealthcheck.ds.backends.BackendsCheck.DSBLE0006: BDB is deprecated and should not be used as a backend


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Resolves: RHEL-5151 - [RFE] defer memberof nested updates
  - Resolves: RHEL-54148 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to.
  - Resolves: RHEL-60135 - deadlock during cleanAllRuv
  - Resolves: RHEL-61341 - After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-61349 - Remove deprecated setting for HR time stamps in logs
  - Resolves: RHEL-62875 - Passwords are not being updated to use the configured storage scheme ( nsslapd-enable-upgrade-hash is enabled ).
  - Resolves: RHEL-64438 - VLV errors with RSNv3 and pruning enabled [rhel-9]
  - Resolves: RHEL-64854 - cleanallruv consums CPU and is slow
  - Resolves: RHEL-65506 - AddressSanitizer: double-free
  - Resolves: RHEL-65512 - AddressSanitizer: heap-use-after-free in import_abort_all
  - Resolves: RHEL-65561 - LeakSanitizer: detected memory leaks in dbmdb_public_db_op
  - Resolves: RHEL-65662 - Replication issue between masters using cert based authentication
  - Resolves: RHEL-65664 - LDAP unprotected search query during certificate based authentication
  - Resolves: RHEL-65665 - Ambiguous warning about SELinux in dscreate for non-root user
  - Resolves: RHEL-65741 - LeakSanitizer: memory leak in ldbm_entryrdn.c
  - Resolves: RHEL-65776 - Wrong set of entries returned for some search filters [rhel-9]
  - Resolves: RHEL-67004 - "dsconf config replace" should handle multivalued attributes.
  - Resolves: RHEL-67005 - Online backup hangs sporadically.
  - Resolves: RHEL-67008 - Some replication status data are reset upon a restart.
  - Resolves: RHEL-67020 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index
  - Resolves: RHEL-67024 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart.
  - Resolves: RHEL-69806 - ipahealthcheck.ds.replication displays WARNING '1 conflict entries found under the replication suffix'
  - Resolves: RHEL-69826 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9]
  - Resolves: RHEL-70127 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9]
  - Resolves: RHEL-70252 - Freelist ordering causes high wtime
  - Resolves: RHEL-71218 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-9]
  - Resolves: RHEL-74153 - backup/restore broken [rhel-9]
  - Resolves: RHEL-74158 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9]
  - Resolves: RHEL-74163 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set [rhel-9]
  - Resolves: RHEL-74168 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9]
  - Resolves: RHEL-74174 - Replication broken after backup restore with freeipa configuration [rhel-9]
  - Resolves: RHEL-74353 - nsslapd-haproxy-trusted-ip is not in schema [rhel-9]
  - Resolves: RHEL-76019 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.51.7-1
changelog:
  - Update to 1.51.7 (dev)
  - Add support in initramfs generator for parsing NM eDNS configuration (RHEL-70420)
  - Add new dnsconfd DNS backend (RHEL-67917)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.7-2
changelog:
  - Remove the build argument -flto-partition to avoid compilation crashes due
    to high memory usage.


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-2
changelog:
  - Support point-to-point IPSec tunnel (RHEL-20690)
  - Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
  - Support configuring IPSec mode with 'type' (RHEL-21554)


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Jaroslav Kysela <perex@perex.cz> - 2.2.5-2
changelog:
  - add sof-rpl-rt711-l0-rt1316-l12-rt714-l3.tplg for Dell SKU 0BDA
  - add xz compression support (with CRC32)


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
changelog:
  - security: require pykickstart version with %certificates support (rvykydal)
    Resolves: RHEL-61430
  - security: do not crash initramfs ks parsing on failing certificate dump
    (rvykydal)
    Resolves: RHEL-61430
  - security: add service to transfer certificates from initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates in initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates in pre-install phase only for dnf payload
    (rvykydal)
    Resolves: RHEL-61430
  - security: raise exception if certificate destination is unknown (rvykydal)
    Resolves: RHEL-61430
  - security: log a warning when dumping certificate over an existing file
    (rvykydal)
    Resolves: RHEL-61430
  - security: pre-install certificates before payload installation (rvykydal)
    Resolves: RHEL-61430
  - security: add API to install certificates early before payload (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates on target system (rvykydal)
    Resolves: RHEL-61430
  - security: Add API for installation on target system (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates early after Anaconda start (rvykydal)
    Resolves: RHEL-61430
  - security: add API to import certificates to Anaconda environment (rvykydal)
    Resolves: RHEL-61430
  - security: add API: Certificate getter (rvykydal)
    Resolves: RHEL-61430
  - kickstart: extend section specification for list of section data (rvykydal)
  - security: implement the support to install certificates to Anaconda
    (rvykydal)
    Resolves: RHEL-61430
  - translations: bump dependency to l10n repo because of branch switch
    (k.koukiou)
  - util: correct errors and suppress stderr for common cases (riehecky)
  - util: Add additional information for EFI systems (riehecky)
    Resolves: RHEL-55128


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.15-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77155
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77155
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71824
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71824


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.16-1
changelog:
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79803
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79804


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.17-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80303
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80023
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80233
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80023


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.1-1
changelog:
  - network: disable NM autoconnections also when BOOTIF is used (rvykydal)
    Resolves: RHEL-78272
  - network: support inst.net.noautodefault option (rvykydal)
    Related: RHEL-78272
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83214
  - Support leavebootorder for bootupd (jkonecny)
    Resolves: RHEL-40897
  - bootupd: call bootupctl with --update-firmware (awilliam)
    Resolves: RHEL-40897


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.2-1
changelog:
  - Fix typo in systemd service (jstodola)
    Resolves: RHEL-78272
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: INSTALLER-4148
    Resolves: RHEL-21691
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-82694
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-82694


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Nick Clifton <nickc@redhat.com> - 12.83-1
changelog:
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.
  - Clang & LLVM Plugins: Include install directory in binary.  (RHEL-54069)
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Nick Clifton <nickc@redhat.com> - 12.96-1
changelog:
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-529


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Fail on RHEL or CentOS 10 because it's not supported
    Resolves: RHEL-67804
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-67807
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68374
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69311


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204510)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.7-1
changelog:
  - ansible-core 2.14.7 release (rhbz#2221820)
  - rebuild with python 3.9 (rhbz#2221820)
  - remove bundled packaging, pyparsing and resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.9-1
changelog:
  - ansible-core 2.14.9 release (rhbz#2232432)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13744
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4962
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13758
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17954
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17957
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-19123
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19130
  - Idempotency fixes
    Resolves: RHEL-19132
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19134
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19136


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Resolves: RHEL-35565
  - New inventory plugin
    Resolves: RHEL-35541
  - Enable batch command as backend
    Resolves: RHEL-38943
  - New collection sub package
    Resolves: RHEL-38931


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-22
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-18
changelog:
  - Add a basic read-only support for UDF filesystem
    Resolves: RHEL-13329
  - nvme: Skip startup/write when NVMe plugin isn't available
    Resolves: RHEL-28124


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-25
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74078
  - Include additional information in PartitioningError
    Resolves: RHEL-8005


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-26
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-8008
    Resolves: RHEL-8012


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-19
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54686]
  - Resolves: RHEL-54686
    ([RHEL-9.5] cloud-init schema validation fails.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-20
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-61224]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-61224]
  - Resolves: RHEL-61224
    (Configuring metric for default gateway is not working)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122]
  - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122]
  - Resolves: RHEL-71122
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] )


author: Jon Maloy <jmaloy@redhat.com> - 24.4-4
changelog:
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361]
  - Resolves: RHEL-76361
    ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-5
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703]
  - Resolves: RHEL-81703
    (DataSourceNoCloudNet network configuration is ineffective - c9s)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-6
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658]
  - Resolves: RHEL-88658
    (Cloud-Init Backport Optimization Features on Alibaba Cloud)


author: Bob Mader <bob@redhat.com> - 0.1.7-2
changelog:
  - Initial build for EL9
  - Applying changes for gating - adding the .fmf directory
  - Resolves: RHEL-57044


author: Packit <hello@packit.dev> - 332-1
changelog:
  - The "shareable" attribute of disks is no longer modified by Cockpit
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 332-1
changelog:
  - containers/ws: Include cockpit-files
  - login: Beibooting to all supported OSes
  - metrics: Show system boots in metrics


author: Packit <hello@packit.dev> - 336-1
changelog:
  - storage: Implement deletion of multi-device btrfs (rhbz#2352385)
  - storage: Use mdraid metadata version 1.0 when in Anaconda mode (rhbz#2352953)
  - Add a channel capabilities system


author: Packit <hello@packit.dev> - 336.1-1
changelog:
  - storage: Fix passphrase remembering with "Reuse encryption" (rhbz#2354497)
  - Translation updates (rhbz#2354986)


author: Packit <hello@packit.dev> - 336.2-1
changelog:
  - storage: Revert "Use mdraid metadata version 1.0 when in Anaconda mode" (rhbz#2352953)
  - Translation updates (rhbz#2354986)


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.230.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.230.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.231.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.231.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.232.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.232.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.233.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.233.0
  - Resolves: RHEL-58997


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 3:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Related: RHEL-80816


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-131
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-8.el9
  - Related: RHEL-80816


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Mark Wielaard <mjw@redhat.com> - 5.0-8
changelog:
  - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch
  - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch


author: Mark Wielaard <mjw@redhat.com> - 5.0-11
changelog:
  - Add 0001-Add-basic-find-debuginfo-script-tests.patch
  - Add debugedit-5.0-find-debuginfo-tests-fixups.patch


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-4
changelog:
  - edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081]
  - Resolves: RHEL-56081
    ([EDK2] Shim fallback reboot workaround might not work on SNP)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-5
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847]
  - Resolves: RHEL-45847
    ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-6
changelog:
  - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974]
  - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336]
  - Resolves: RHEL-56974
    (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9])
  - Resolves: RHEL-55336
    (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-7
changelog:
  - edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833]
  - Resolves: RHEL-56248
    (507x510 display resolution should not crash the firmware [edk2,rhel-9.6])
  - Resolves: RHEL-60833
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-8
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]
  - Resolves: RHEL-65725
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-3
changelog:
  - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865]
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019]
  - Resolves: RHEL-70865
    (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7])
  - Resolves: RHEL-83019
    (The newer revocation file and Server 2025 required to update it [rhel-9])


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-627
  - fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D')
  Resolves: RHEL-817
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-730
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-816


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-102
changelog:
  RHEL 9.7.0 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-63090
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-59626
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-21871
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-30020


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-85
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76493


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-87
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83255


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-88
changelog:
  - fence_compute/fence_evacuate: dont use deprecated inspect.getargspec()
    Resolves: RHEL-84448
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79798


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-95
changelog:
  - fence_kubevirt: use hard poweroff
    Resolves: RHEL-82193
  - bundled setuptools: fix CVE-2025-47273
    Resolves: RHEL-95901


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Fixes: RHEL-64749


author: Eric Garver <egarver@redhat.com> - 1.3.4-6
changelog:
  - feat(IPv6_rpfilter): support loose rpfilter
  - feat(IPv6_rpfilter): support loose-forward rpfilter
  - feat(IPv6_rpfilter): support strict-forward rpfilter


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83109


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-12
changelog:
  - Resolves: RHEL-3541 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-9
changelog:
  - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
  - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-1.el9
changelog:
  - Rebase to gdb-14.2 and update all bug references
    (Resolves: RHEL-39554)
    (Resolves: RHEL-39553)
    (Resolves: RHEL-10550)
    (Resolves: RHEL-39555)
    (Resolves: RHEL-39585)
    (Resolves: RHEL-36211)


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Joan Torres <joantolo@redhat.com> - 40.1-31
changelog:
  - Fix legacy-xorg session switching
    The fix that intended to fix the issue wasn't complete and also,
    introduced a bug on user switching for non legacy-xorg servers.
    This fix addresses both issues.
  - Avoid waiting 10s when starting GDM in legacy-xorg mode
    Resolves: RHEL-72694


author: Joan Torres <joantolo@redhat.com> - 40.1-32
changelog:
  - Leave session-opened signature the same as before and use a new
    session-opened-with-session-id signal to keep ABI compatibility
    Related: RHEL-46383


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Frédéric Bérat <fberat@redhat.com> - 2.34-199
changelog:
  - Ensure fallback initialization of ctype TLS data pointers to fix segfaults in
    programs using dlmopen or auditors (RHEL-72017)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Joan Torres <joantolo@redhat.com> - 40.1.1-11
changelog:
  - Add race fixes needed when terminating a conflicting session
    on GDM greeter.
    Resolves: RHEL-92341


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: David Benoit <dbenoit@redhat.com> - 1.22.5-2
changelog:
  - Rebuild race detector archives from LLVM sources
  - Add golang-race subpackage
  - Resolves: RHEL-33421
  - Remove unused crypto/internal/boring/syso package
  - Resolves: RHEL-54335


author: Archana <aravinda@redhat.com> - 1.23.2-1
changelog:
  - Rebase to Go1.23.2
  - Remove fix standard crypto panic patch as the source already has changes
  - Resolves: RHEL-62392


author: David Benoit <dbenoit@redhat.com> - 1.24.3-1
changelog:
  - Update to Go 1.24.3 (fips-1)
  - Exclude TestEd25519Vectors, TestACVP which require network
  - Resolves: RHEL-83439
  - Resolves: RHEL-85268
  - Resolves: RHEL-87632
  - Resolves: RHEL-91312
  - Resolves: RHEL-92023


author: David Benoit <dbenoit@redhat.com> - 1.24.3-3
changelog:
  - Update to Go 1.24.3 (fips-3)
  - Fix linkage issue in bin/go
  - Fix loading issue in non-fips mode
  - Related: RHEL-83439
  - Related: RHEL-87632


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-15
changelog:
  - Resolves RHEL-97518: Rework grafana-selinux spec file sections
  - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: saypaul <paul.sayan@gmail.com> - 0.15.5-1
changelog:
  - The 0.15.5 release
  - Auto-detect image type and use correct rollback
  - Support for read only /boot mount
  - Warn users of missing disabled healthchecks
  - Add feature to disable healthchecks


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.15.5-3
changelog:
  - Moved greenboot config to /etc/grub.d.
  - %post symlink greenboot.cfg to bootupd if present
  - %postun remove symlink from bootupd if present


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Antonio Murdaca <antoniomurdaca@gmail.com> - 0.15.8-1
changelog:
  * ci: add ci test for pull request by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/164
   * ci: add more wait time for fallback by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/167
   * ci: fix ansible check failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/169
   * ci: add test case of bootc anaconda iso by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/171
   * test github token by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/174
   * update github action by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/177
   * Update greenboot-ci.yaml by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/179
   * ci: fix iso case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/173
   * ci: add support for fedora rawhide by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/181
   * ci: fix rahide failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/183
   * ci: fix podman retry issue by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/185
   * ci: add centos-stream-9 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/187
   * ci: add rhel 9.6 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/190
   * ci: fix rhel 9.6 anaconda case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/193
   * ci: fix secret error by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/195
   * specfile: Stop building on ix86 by @travier in https://github.com/fedora-iot/greenboot/pull/197
   * rollback: if no bootc, fallback to rpm-ostree by @runcom in https://github.com/fedora-iot/greenboot/pull/199
   * fix:fail early for any required script failure by @say-paul in https://github.com/fedora-iot/greenboot/pull/198
   * Release 0.15.8 by @runcom in https://github.com/fedora-iot/greenboot/pull/202

   * @travier made their first contribution in https://github.com/fedora-iot/greenboot/pull/197

   **Full Changelog**: https://github.com/fedora-iot/greenboot/compare/v0.15.7...v0.15.8
  - Resolves: RHEL-78244


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-4
changelog:
  - Add support for nbd+unix:// URIs
    resolves: RHEL-33956
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-36634


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56811
  - Replace Jansson with json-c
    resolves: RHEL-65294


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.4
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83036


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80816


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.43.20190303git
changelog:
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902]
  - Resolves: RHEL-9902
    ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.44.20190303git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812]
  - Resolves: RHEL-95812
    ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
changelog:
  - Re-sync with upstream changes adding ignition-grub subpackage
    and a few minor changes
  - New release


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-9
changelog:
  - Resolves: RHEL-74465 kinit with external idp user is failing
  - Resolves: RHEL-75656 Include latest fixes in python3-ipatests package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-10
changelog:
  - Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-11
changelog:
  - Resolves: RHEL-67913 Add DNS over TLS Support, Require bind9.18 32:9.18.29-2 and new bind-dyndb-ldap 11.11-1


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-14
changelog:
  - Resolves: RHEL-80345 Use new bind9.18-dyndb-ldap and bind9.18 only for DNS over TLS with the ipa-server-encrypted-dns package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-15
changelog:
  - Resolves: RHEL-84481 Protect all IPA service principals
  - Resolves: RHEL-84277 [RFE] IDM support UIDs up to 4,294,967,293
  - Resolves: RHEL-84276 Ipa client --raw --structured throws internal error
  - Resolves: RHEL-82707 Search size limit tooltip has Search time limit tooltip text
  - Resolves: RHEL-82089 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30658 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-88900 [RFE] Add check on CA cert expiry for ipa-cert-fix
  - Resolves: RHEL-88037 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86483 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-41178 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-95010 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93890 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-93887 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-93483 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-88834 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.10-0.2.ea
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Set rpmrelease to 2
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.11-2
changelog:
  - Update to jdk-17.0.13+11 (GA)
  - Update .gitignore to ignore openjdk-17.0.13+11.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 11
  - Set is_ga to 1
  - Update sources to openjdk-17.0.13+11.tar.xz
  - Resolves: RHEL-58785
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-2
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Related: RHEL-58797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.2.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58797
  - Resolves: RHEL-17191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74403


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73562


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86984
  - Resolves: RHEL-86635


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-586.el9]
changelog:
  - net: introduce per netns packet chains (Paolo Abeni) [RHEL-88921]
  - nvme: enable CONFIG_NVME_KEYRING (Maurizio Lombardi) [RHEL-72531]
  - nvmet-auth: always free derived key data (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix out-of-bounds access in nvmet_enable_port (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: cleanup link state management (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: clear CC and CSTS when disabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: always fully initialize completion entries (Maurizio Lombardi) [RHEL-72531]
  - nvmet: auth: use NULL to clear a pointer in nvmet_auth_sq_free() (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: sysfs links may not be created for devices (Maurizio Lombardi) [RHEL-72531]
  - nvme: fixup scan failure for non-ANA multipath controllers (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: take tgtport reference only once (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: update tgtport ref per assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_free_hostport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_delete_assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: add ref counting to lport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: replace kref with refcount (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: swap list_add_tail arguments (Maurizio Lombardi) [RHEL-72531]
  - nvme: multipath: fix return value of nvme_available_path (Maurizio Lombardi) [RHEL-72531]
  - nvme: re-read ANA log page after ns scan completes (Maurizio Lombardi) [RHEL-72531]
  - nvme: requeue namespace scan on missed AENs (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-72531]
  - crypto,fs: Separate out hkdf_extract() and hkdf_expand() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: disable the target pci-epf module (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip nvme_write_sq_db on empty rqlist (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Keep completion queues mapped (Maurizio Lombardi) [RHEL-72531]
  - objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace max(a, min(b, c)) by clamp(val, lo, hi) (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Always configure BAR0 as 64-bit (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Remove duplicate uuid_copy (Maurizio Lombardi) [RHEL-72531]
  - nvme: zns: Simplify nvme_zone_parse_entry() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Remove redundant 'flush_workqueue()' calls (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: Remove unused functions (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove stale comment (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: Utilise min3() to simplify queue count calculation (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for queue-depth io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for numa io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for round-robin io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tls_concat and tls_key debugfs entries (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet-tcp: support secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet: Add 'sq' argument to alloc_ctrl_args (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-fabrics: reset admin connection for secure concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-tcp: request secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-keyring: add nvme_tls_psk_refresh() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_derive_tls_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_digest() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: map uring_cmd data even if address is 0 (Maurizio Lombardi) [RHEL-72531]
  - io_uring/nvme: pass issue_flags to io_uring_cmd_import_fixed() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not add an IRQ vector if not needed (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Set NVMET_PCI_EPF_Q_LIVE when a queue is fully created (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix stuck reset on concurrent DPC and HP (Maurizio Lombardi) [RHEL-72531]
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Maurizio Lombardi) [RHEL-72531 RHEL-86914] {CVE-2025-21927}
  - nvme-tcp: Fix a C2HTermReq error message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: remove old function prototype (Maurizio Lombardi) [RHEL-72531]
  - nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: clean up CMBMSC when registering CMB fails (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix possible UAF in nvme_tcp_poll (Maurizio Lombardi) [RHEL-72531]
  - nvme: only allow entering LIVE from CONNECTING state (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: rely on state transitions to handle connectivity loss (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Support coprocessors left idle (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Release power domains when probe fails (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: add missing space in err message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Avoid RCU stalls under heavy workload (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not uselessly write the CSTS register (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Correctly initialize CSTS when enabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Fix crash when a namespace is disabled (Maurizio Lombardi) [RHEL-72531 RHEL-73614 RHEL-85327] {CVE-2025-21850}
  - nvme-tcp: add basic support for the C2HTermReq PDU (Maurizio Lombardi) [RHEL-72531]
  - nvme: make nvme_tls_attrs_group static (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add a missing endianess conversion in nvmet_execute_admin_connect (Maurizio Lombardi) [RHEL-72531]
  - nvmet: the result field in nvmet_alloc_ctrl_args is little endian (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix a memory leak in controller identify (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: do not ignore connectivity loss during connecting (Maurizio Lombardi) [RHEL-72531]
  - nvme: handle connectivity loss in nvme_set_queue_count (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: go straight to connecting state when initializing (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove redundant dma frees in hmb (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix rw control endian access (Maurizio Lombardi) [RHEL-72531]
  - nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use correct size to free the hmb buffer (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error path for xa_store in nvme_init_effects (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix comment typo (Maurizio Lombardi) [RHEL-72531]
  - nvmet: New NVMe PCI endpoint function target driver (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement arbitration feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt config feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt coalescing feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement host identifier set feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce get/set_feature controller operations (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Do not require SGL for PCI target controller commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add support for I/O queue management admin commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_sq_create() and nvmet_cq_create() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_req_transfer_len() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Improve nvmet_alloc_ctrl() interface and implementation (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add PCI transport type (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add drvdata field to struct nvmet_ctrl (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_get_cmd_effects_admin() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Export nvmet_update_cc() and nvmet_cc_xxx() helpers (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add vendor_id and subsys_vendor_id subsystem attributes (Maurizio Lombardi) [RHEL-72531]
  - nvme: Move opcode string helper functions declarations (Maurizio Lombardi) [RHEL-72531]
  - nvme: change return type of nvme_poll_cq() to bool (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error check for xa_store in nvme_get_effects_log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: handle rw's limited retry flag (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: remove nvme_tcp_destroy_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvmet-loop: avoid using mutex in IO hotpath (Maurizio Lombardi) [RHEL-72531]
  - nvmet: propagate npwg topology (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: 512 byte aligned dma pool segment quirk (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: simplify nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: no need to quiesce admin_q in nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix the memleak while create new ctrl failed (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56632}
  - nvme-pci: don't use dma_alloc_noncontiguous with 0 merge boundary (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace kmalloc + memset with kzalloc for data allocation (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove two deallocate zeroes quirks (Maurizio Lombardi) [RHEL-72531]
  - nvme: don't apply NVME_QUIRK_DEALLOCATE_ZEROES when DSM is not supported (Maurizio Lombardi) [RHEL-72531]
  - nvmet: use kzalloc instead of ZERO_PAGE in nvme_execute_identify_ns_nvm() (Maurizio Lombardi) [RHEL-72531]
  - nvme: tuning pr code by using defined structs and macros (Maurizio Lombardi) [RHEL-72531]
  - nvme: introduce change ptpl and iekey definition (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tracing of reservation commands (Maurizio Lombardi) [RHEL-72531]
  - nvme: parse reservation commands's action and rtype to string (Maurizio Lombardi) [RHEL-72531]
  - nvmet: report ns's vwc not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: check ns's volatile write cache not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: add rotational support (Maurizio Lombardi) [RHEL-72531]
  - nvme: use command set independent id ns if available (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support for csi identify ns (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement rotational media information log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement endurance groups (Maurizio Lombardi) [RHEL-72531]
  - nvmet: declare 2.1 version compliance (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement crto property (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported features log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported log pages (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement active command set ns list (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement id ns for nvm command set (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support reservation feature (Maurizio Lombardi) [RHEL-72531]
  - nvme-core: remove repeated wq flags (Maurizio Lombardi) [RHEL-72531]
  - nvmet: make nvmet_wq visible in sysfs (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use dma_alloc_noncontigous if possible (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix freeing of the HMB descriptor table (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56756}
  - nvme: re-fix error-handling for io_uring nvme-passthrough (Maurizio Lombardi) [RHEL-72531]
  - nvme: module parameter to disable pi with offsets (Maurizio Lombardi) [RHEL-72531]
  - nvme: enhance cns version checking (Maurizio Lombardi) [RHEL-72531]
  - vfs: fix race between evice_inodes() and find_inode()&iput() (CKI Backport Bot) [RHEL-63193] {CVE-2024-47679}
  - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-86831]
  - proc: fix UAF in proc_get_inode() (Ian Kent) [RHEL-86809] {CVE-2025-21999}
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (David Marlin) [RHEL-87889] {CVE-2025-21969}
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CKI Backport Bot) [RHEL-87889] {CVE-2025-21969}
  - scsi: mpi3mr: Event processing debug improvement (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Add level check to control event logging (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Reset the pending interrupt flag (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix pending I/O counter (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Task Abort EH Support (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.13.0.5.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Check admin reply queue from Watchdog (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update timestamp only for supervisor IOCs (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update MPI Headers to revision 35 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix locking in an error path (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix spelling mistake "skiping" -> "skipping" (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.12.1.0.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page1: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page0: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_pcie_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_sas_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (CKI Backport Bot) [RHEL-79805]
  - PCI: Use downstream bridges for distributing resources (Myron Stowe) [RHEL-73396]
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Gavin Shan) [RHEL-87960]
  - s390/qdio: Move memory alloc/pointer arithmetic for slib and sl into one place (Mete Durlu) [RHEL-73492]
  - s390/qdio: Rename feature flag aif_osa to aif_qdio (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Clarify zfcp_port refcount ownership during "link" test (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Correct kdoc parameter description for sending ELS and CT (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Switch over to sysfs_emit() (Mete Durlu) [RHEL-73492]
  - s390: Add z17 elf platform (Mete Durlu) [RHEL-89726]
  - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-89579]
  - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-89579]
  - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-89579]
  - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-89579]
  - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-89579]
  - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-89579]
  - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-89579]
  - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-89579]
  - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-89579]
  - mptcp: fix spurious wake-up on under memory pressure (Davide Caratti) [RHEL-84571]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Davide Caratti) [RHEL-84571] {CVE-2025-23145}
  - mptcp: Fix data stream corruption in the address announcement (Davide Caratti) [RHEL-84571]
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Davide Caratti) [RHEL-84571] {CVE-2025-21938}
  - mptcp: always handle address removal under msk socket lock (Davide Caratti) [RHEL-84571] {CVE-2025-21875}
  - mptcp: handle fastopen disconnect correctly (Davide Caratti) [RHEL-84571] {CVE-2025-21705}
  - mptcp: consolidate suboption status (Davide Caratti) [RHEL-84571] {CVE-2025-21707}
  - mptcp: be sure to send ack when mptcp-level window re-opens (Davide Caratti) [RHEL-84571]
  - mptcp: pm: only set fullmesh for subflow endp (Davide Caratti) [RHEL-84571] {CVE-2025-21706}
  - mptcp: hold pm lock when deleting entry (Davide Caratti) [RHEL-84571]
  - mptcp: prevent MPC handshake on port-based signal endpoints (Davide Caratti) [RHEL-84571]
  - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-81397] {CVE-2025-21764}
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Fix fifo underflow on flush (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Adjust the timeout for FIFO mode (Derek Barbosa) [RHEL-89346]
  - tty: serial: 8250: Fix another runtime PM usage counter underflow (Derek Barbosa) [RHEL-89346]
  - Flush console log from kernel_power_off() (Derek Barbosa) [RHEL-89346]
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Derek Barbosa) [RHEL-89346]
  - dev_printk: Add and use dev_no_printk() (Derek Barbosa) [RHEL-89346]
  - printk: Let no_printk() use _printk() (Derek Barbosa) [RHEL-89346]
  - printk: index: Add indexing support to dev_printk (Derek Barbosa) [RHEL-89346]
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Waiman Long) [RHEL-72448]
  - rtc: rzn1: fix BCD to rtc_time conversion errors (Waiman Long) [RHEL-72448]
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Waiman Long) [RHEL-72448] {CVE-2024-56739}
  - rtc: abx80x: Fix WDT bit position of the status register (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Waiman Long) [RHEL-72448]
  - rtc: at91sam9: fix OF node leak in probe() error path (Waiman Long) [RHEL-72448]
  - rtc: interface: Add RTC offset to alarm after fix-up (Waiman Long) [RHEL-72448]
  - rtc: abx80x: Fix return value of nvmem callback on read (Waiman Long) [RHEL-72448]
  - rtc: cmos: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: isl1208: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Waiman Long) [RHEL-72448]
  - rtc: Extend timeout for waiting for UIP to clear to 1s (Waiman Long) [RHEL-72448]
  - rtc: Add support for configuring the UIP timeout for RTC reads (Waiman Long) [RHEL-72448]
  - rtc: Adjust failure return code for cmos_set_alarm() (Waiman Long) [RHEL-72448]
  - rtc: mc146818-lib: Adjust failure return code for mc146818_get_time() (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call (Waiman Long) [RHEL-72448]
  - rtc: efi: fixed typo in efi_procfs() (Waiman Long) [RHEL-72448]
  - rtc: brcmstb-waketimer: support level alarm_irq (Waiman Long) [RHEL-72448]
  - rtc: stop warning for invalid alarms when the alarm is disabled (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: Allow to wake up system without IRQ (Waiman Long) [RHEL-72448]
  - rtc: rv8803: fix Wvoid-pointer-to-enum-cast warning (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Simplify clk handling in st_rtc_probe() (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Waiman Long) [RHEL-72448]
  - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Waiman Long) [RHEL-72448]
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public() (Guillaume Nault) [RHEL-84572]
  - net: Add non-RCU dev_getbyhwaddr() helper (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in inet_select_addr() (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in rt_is_expired() (Guillaume Nault) [RHEL-84572]
  - ipv4: add RCU protection to ip4_dst_hoplimit() (Guillaume Nault) [RHEL-84572]
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Guillaume Nault) [RHEL-84572]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-587.el9]
changelog:
  - af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer. (Davide Caratti) [RHEL-84598]
  - net/af_packet: check len when min_header_len equals to 0 (Davide Caratti) [RHEL-84598]
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57901}
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57902}
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Davide Caratti) [RHEL-84598]
  - perf trace: Add missing perf_tool__init() (Anubhav Shelat) [RHEL-83634]
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Remove unused iscsi_create_session() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: bnx2i: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Chris Leech) [RHEL-90552]
  - Revert "mm: kmemleak: alloc gray object for reserved region with direct map" (Luiz Capitulino) [RHEL-75156]
  - cifs: Fix integer overflow while processing closetimeo mount option (CKI Backport Bot) [RHEL-87899] {CVE-2025-21962}
  - cifs: Fix integer overflow while processing acregmax mount option (CKI Backport Bot) [RHEL-87920] {CVE-2025-21964}
  - net: fix geneve_opt length integer overflow (CKI Backport Bot) [RHEL-87973] {CVE-2025-22055}
  - RDMA/core: Silence oversized kvmalloc() warning (Kamal Heib) [RHEL-75591]
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Kamal Heib) [RHEL-75591]
  - RDMA/ucaps: Avoid format-security warning (Kamal Heib) [RHEL-75591]
  - IB/mad: Check available slots before posting receive WRs (Kamal Heib) [RHEL-75591]
  - RDMA/core: Pass port to counter bind/unbind operations (Kamal Heib) [RHEL-75591]
  - RDMA/core: Add support to optional-counters binding configuration (Kamal Heib) [RHEL-75591]
  - RDMA/core: Create and destroy rdma_counter using rdma_zalloc_drv_obj() (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix use-after-free when rename device name (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() (Kamal Heib) [RHEL-75591]
  - docs: infiniband: document the UCAP API (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Add support for UCAPs in context creation (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Introduce UCAP (User CAPabilities) API (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fixes infiniband sysctl bounds (Kamal Heib) [RHEL-75591]
  - RDMA/core: Don't expose hw_counters outside of init net namespace (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix best page size finding when it can cross SG entries (Kamal Heib) [RHEL-75591]
  - IB/iser: fix typos in iscsi_iser.c comments (Kamal Heib) [RHEL-75591]
  - RDMA/core: Use ib_port_state_to_str() for IB state sysfs (Kamal Heib) [RHEL-75591]
  - IB/cache: Add log messages for IB device state changes (Kamal Heib) [RHEL-75591]
  - ext4: avoid writing unitialized memory to disk in EA inodes (Brian Foster) [RHEL-86510]
  - ext4: don't track ranges in fast_commit if inode has inlined data (Brian Foster) [RHEL-86510]
  - ext4: fix possible tid_t sequence overflows (Brian Foster) [RHEL-86510]
  - ext4: use ext4_update_inode_fsync_trans() helper in inode creation (Brian Foster) [RHEL-86510]
  - ext4: use memtostr_pad() for s_volume_name (Brian Foster) [RHEL-86510]
  - ext4: warn if delalloc counters are not zero on inactive (Brian Foster) [RHEL-86510]
  - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-86510]
  - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-86510]
  - ext4: correct the hole length returned by ext4_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-86510]
  - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: propagate errors from ext4_sb_bread() in ext4_xattr_block_cache_find() (Brian Foster) [RHEL-86510]
  - jbd2: remove redundant assignement to variable err (Brian Foster) [RHEL-86510]
  - ext4: remove the redundant folio_wait_stable() (Brian Foster) [RHEL-86510]
  - ext4: fix potential unnitialized variable (Brian Foster) [RHEL-86510]
  - ext4: remove block_device_ejected() (Brian Foster) [RHEL-86510]
  - ext4: keep "prefetch_grp" and "nr" consistent (Brian Foster) [RHEL-86510]
  - ext4: replace deprecated strncpy with alternatives (Brian Foster) [RHEL-86510]
  - ext4: clean up s_mb_rb_lock to fix build warnings with C=1 (Brian Foster) [RHEL-86510]
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_show() (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_store() (Brian Foster) [RHEL-86510]
  - ext4: avoid overflow when setting values via sysfs (Brian Foster) [RHEL-86510]
  - ext4: avoid excessive credit estimate in ext4_tmpfile() (Brian Foster) [RHEL-86510]
  - ext4: remove unneeded if checks before kfree (Brian Foster) [RHEL-86510]
  - ext4: set FMODE_CAN_ODIRECT instead of a dummy direct_IO method (Brian Foster) [RHEL-86510]
  - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-83380] {CVE-2024-50301}
  - tracing/histograms: Fix memory leak problem (CKI Backport Bot) [RHEL-81008] {CVE-2022-49648}
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains (Marcin Juszkiewicz) [RHEL-92493]
  - redhat: add test_klp_kprobe to mod-internal.list (Denis Aleksandrov) [RHEL-90828]
  - vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-89689]
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (David Arcari) [RHEL-87253] {CVE-2022-3424}
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs (Herton R. Krzesinski) [RHEL-74389]
  - x86: bring back rep movsq for user access on CPUs without ERMS (Herton R. Krzesinski) [RHEL-74389]
  - io_uring: prevent opcode speculation (CKI Backport Bot) [RHEL-83230] {CVE-2025-21863}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-588.el9]
changelog:
  - scsi: mpt3sas: Fix buffer overflow in mpt3sas_send_mctp_passthru_req() (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Fix spelling mistake "receveid" -> "received" (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: update driver version to 52.100.00.00 (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Send a diag reset if target reset fails (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Report driver capability as part of IOCINFO command (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Add support for MCTP Passthrough commands (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Update MPI headers to 02.00.62 version (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Fix a locking bug in an error path (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Reduce log level of ignore_delay_remove message to KERN_INFO (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Remove unused config functions (Chandrakanth Patil) [RHEL-81907]
  - scsi: Constify struct pci_error_handlers (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Add details to EEDPTagMode error message (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Update driver version to 51.100.00.00 (Chandrakanth Patil) [RHEL-81907]
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Chandrakanth Patil) [RHEL-81907]
  - Revert "cgroup: Avoid -Wstringop-overflow warnings" (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Move procfs cpuset attribute under cgroup-v1.c (Radostin Stoyanov) [RHEL-80382]
  - Revert "selftests/cgroup: Drop define _GNU_SOURCE" (Radostin Stoyanov) [RHEL-80382]
  - selftests/cgroup: Fix compile error in test_cpu.c (Radostin Stoyanov) [RHEL-80382]
  - configs: enable CPUSETS_V1 on RHEL (Radostin Stoyanov) [RHEL-80382]
  - mm: memcg: move soft limit reclaim code to memcontrol-v1.c (Radostin Stoyanov) [RHEL-80382]
  - mm: memcg: introduce memcontrol-v1.c (Radostin Stoyanov) [RHEL-80382]
  - mm: remove page_cpupid_xchg_last() (Radostin Stoyanov) [RHEL-80382]
  - mm: use folio_xchg_last_cpupid() in wp_page_reuse() (Radostin Stoyanov) [RHEL-80382]
  - mm: convert wp_page_reuse() and finish_mkwrite_fault() to take a folio (Radostin Stoyanov) [RHEL-80382]
  - mm: make finish_mkwrite_fault() static (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use folio_xchg_last_cpupid() in __split_huge_page_tail() (Radostin Stoyanov) [RHEL-80382]
  - mm: migrate: use folio_xchg_last_cpupid() in folio_migrate_flags() (Radostin Stoyanov) [RHEL-80382]
  - sched/fair: use folio_xchg_last_cpupid() in should_numa_migrate_memory() (Radostin Stoyanov) [RHEL-80382]
  - mm: add folio_xchg_last_cpupid() (Radostin Stoyanov) [RHEL-80382]
  - mm: remove xchg_page_access_time() (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use a folio in change_huge_pmd() (Radostin Stoyanov) [RHEL-80382]
  - mm: mprotect: use a folio in change_pte_range() (Radostin Stoyanov) [RHEL-80382]
  - sched/fair: use folio_xchg_access_time() in numa_hint_fault_latency() (Radostin Stoyanov) [RHEL-80382]
  - mm: add folio_xchg_access_time() (Radostin Stoyanov) [RHEL-80382]
  - mm: remove page_cpupid_last() (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use folio_last_cpupid() in __split_huge_page_tail() (Radostin Stoyanov) [RHEL-80382]
  - mm: memory: use folio_last_cpupid() in do_numa_page() (Radostin Stoyanov) [RHEL-80382]
  - mm: add folio_last_cpupid() (Radostin Stoyanov) [RHEL-80382]
  - mm: huge_memory: use folio_last_cpupid() in do_huge_pmd_numa_page() (Radostin Stoyanov) [RHEL-80382]
  - mm_types: add virtual and _last_cpupid into struct folio (Radostin Stoyanov) [RHEL-80382]
  - Documentation/cgroup-v2: clarify that zswap.writeback is ignored if zswap is disabled (Radostin Stoyanov) [RHEL-80382]
  - selftests: test_zswap: add test for hierarchical zswap.writeback (Radostin Stoyanov) [RHEL-80382]
  - selftests: cgroup: add tests to verify the zswap writeback path (Radostin Stoyanov) [RHEL-80382]
  - selftests: fix the zswap invasive shrink test (Radostin Stoyanov) [RHEL-80382]
  - selftests: add zswapin and no zswap tests (Radostin Stoyanov) [RHEL-80382]
  - selftests: cgroup: update per-memcg zswap writeback selftest (Radostin Stoyanov) [RHEL-80382]
  - selftests: add a sanity check for zswap (Radostin Stoyanov) [RHEL-80382]
  - cgroup/rstat: Selftests for niced CPU statistics (Radostin Stoyanov) [RHEL-80382]
  - cgroup/rstat: Tracking cgroup-level niced CPU time (Radostin Stoyanov) [RHEL-80382]
  - selftests/cgroup: Drop define _GNU_SOURCE (Radostin Stoyanov) [RHEL-80382]
  - selftests: cgroup: remove redundant enabling of memory controller (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Move cpu.h include to cpuset-internal.h (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: add sefltest for cpuset v1 (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: guard cpuset-v1 code under CONFIG_CPUSETS_V1 (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: rename functions shared between v1 and v2 (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move v1 interfaces to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move validate_change_legacy to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move legacy hotplug update to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: add callback_lock helper (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move memory_spread to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move relax_domain_level to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move memory_pressure to cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: move common code to cpuset-internal.h (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: introduce cpuset-v1.c (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Avoid -Wstringop-overflow warnings (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: add decrease attach_in_progress helpers (Radostin Stoyanov) [RHEL-80382]
  - cgroup/pids: Remove unreachable paths of pids_{can,cancel}_fork (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Expose cpuset filesystem with cpuset v1 only (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Do not report unavailable v1 controllers in /proc/cgroups (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Disallow mounting v1 hierarchies without controller implementation (Radostin Stoyanov) [RHEL-80382]
  - cgroup: Fix potential overflow issue when checking max_depth (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Check for partition roots with overlapping CPUs (Radostin Stoyanov) [RHEL-80382]
  - cgroup: clarify css sibling linkage is protected by cgroup_mutex or RCU (Radostin Stoyanov) [RHEL-80382]
  - cgroup/cpuset: Remove cpuset_slab_spread_rotor (Radostin Stoyanov) [RHEL-80382]
  - cgroup: update some statememt about delegation (Radostin Stoyanov) [RHEL-80382]
  - redhat: configs: Enable CX231XX driver (Kate Hsuan) [RHEL-86821]
  - media: usb: usbtv: Stop direct calls to queue num_buffers field (Kate Hsuan) [RHEL-86821]
  - media: saa6752hs: Don't set format in sub-device state (Kate Hsuan) [RHEL-86821]
  - media: i2c: Use accessors for pad config 'try_*' fields (Kate Hsuan) [RHEL-86821]
  - redhat: add downstream SBAT for UKI addons (Emanuele Giuseppe Esposito) [RHEL-92594]
  - uki_addons: provide custom SBAT as input parameter (Emanuele Giuseppe Esposito) [RHEL-92594]
  - uki_addons: remove completely sbat/sbat.conf (Emanuele Giuseppe Esposito) [RHEL-92594]
  - fbdev: efifb: Change the return value type to void (Jocelyn Falempe) [RHEL-75953]
  - fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (Jocelyn Falempe) [RHEL-75953]
  - fbdev: efifb: Use devm_register_framebuffer() (Jocelyn Falempe) [RHEL-75953]
  - fbdev: Introduce devm_register_framebuffer() (Jocelyn Falempe) [RHEL-75953]
  - video: Handle HAS_IOPORT dependencies (Jocelyn Falempe) [RHEL-75953]
  - fbcon: Use oops_in_progress instead of panic_cpu (Jocelyn Falempe) [RHEL-75953]
  - fbcon: Add an option to disable fbcon in panic (Jocelyn Falempe) [RHEL-75953]
  - mm: gup: fix infinite loop within __get_longterm_locked (Waiman Long) [RHEL-89519]
  - udmabuf: fix racy memfd sealing check (Waiman Long) [RHEL-89519]
  - udmabuf: udmabuf_create pin folio codestyle cleanup (Waiman Long) [RHEL-89519]
  - udmabuf: pre-fault when first page fault (Waiman Long) [RHEL-89519]
  - selftests/udmabuf: add tests to verify data after page migration (Waiman Long) [RHEL-89519]
  - udmabuf: pin the pages using memfd_pin_folios() API (Waiman Long) [RHEL-89519]
  - docs: hugetlbpage.rst: add hugetlb migration description (Waiman Long) [RHEL-89519]
  - mm: hugetlb: make the hugetlb migration strategy consistent (Waiman Long) [RHEL-89519]
  - mm: record the migration reason for struct migration_target_control (Waiman Long) [RHEL-89519]
  - selftests: drivers/dma-buf: Improve message in selftest summary (Waiman Long) [RHEL-89519]
  - selftests: drivers/dma-buf: Fix implicit declaration warns (Waiman Long) [RHEL-89519]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-589.el9]
changelog:
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CKI Backport Bot) [RHEL-70062] {CVE-2024-53135}
  - PCI/ACS: Fix 'pci=config_acs=' parameter (Myron Stowe) [RHEL-72898]
  - Documentation: Fix pci=config_acs= example (Myron Stowe) [RHEL-72898]
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (CKI Backport Bot) [RHEL-93256] {CVE-2025-37943}
  - wifi: mac80211: fix MPDU length parsing for EHT 5/6 GHz (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21979}
  - wifi: mac80211: fix SA Query processing in MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: fix assoc link handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: don't queue sdata::work for a non-running sdata (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: trans: cancel restart work on op mode leave (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: pcie: Fix TSO preparation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: disable multi-link reconfiguration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: regulatory: improve invalid hints checking (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21910}
  - wifi: brcmfmac: keep power during suspend if board requires it (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Fix sparse warning for monitor_sdata (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix vendor-specific inheritance (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix MLE non-inheritance parsing (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21951}
  - wifi: iwlwifi: Fix A-MSDU TSO preparation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Free pages allocated when failing to build A-MSDU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: limit printed string from FW file (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21905}
  - wifi: iwlwifi: mvm: use the right version of the rate API (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: don't try to talk to a dead firmware (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21930}
  - wifi: iwlwifi: mvm: don't dump the firmware state upon RFKILL while suspend (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: clean up ROC on failure (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21906}
  - wifi: iwlwifi: fw: avoid using an uninitialized variable (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: allocate chained SG tables for dump (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: remove debugfs dir for virtual monitor (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Cleanup sta TXQs on flush (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21909}
  - wifi: brcmfmac: use random seed flag for BCM4355 and BCM4364 firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix handling of 6 GHz rules (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21744}
  - wifi: rtw88: add RTW88_LEDS depends on LEDS_CLASS to Kconfig (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: unregister wiphy only after netdev registration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: adjust allocation of colocated AP data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix memory leak in ieee80211_mgd_assoc_ml_reconf() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix key cache handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix uninitialized variable access in ath12k_mac_allocate() function (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Remove ath12k_get_num_hw() helper function (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor the ath12k_hw get helper function argument (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor ath12k_hw set helper function argument (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: add implicit beamforming support for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix beacon command during disabling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix ldpc setting (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix definition of tx descriptor (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: connac: adjust phy capabilities based on band constraints (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix HE Phy capability (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: add max mpdu len capability (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921: avoid undesired changes of the preset regulatory domain (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925e: fix too long of wifi resume time (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: add handler to hif suspend/resume event (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix register mapping (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: fix register mapping (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix monitor mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: switch to single multi-radio wiphy (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: move all debugfs files to the primary phy (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: connac: rework connac helpers (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: prepare mt7996_mcu_update_bss_color for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: connac: prepare mt76_connac_mcu_sta_basic_tlv for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: prepare mt7996_mcu_set_timing for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: prepare mt7996_mcu_set_tx for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: prepare mt7996_mcu_add_beacon for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: prepare mt7996_mcu_add_dev/bss_info for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: pass wcid to mt7996_mcu_sta_hdr_trans_tlv (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: use emulated hardware scan support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add multi-radio remain_on_channel functions (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add multi-radio support to scanning code (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add multi-radio support to tx scheduling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add multi-radio support to a few core hw ops (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: remove dev->wcid_phy_mask (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add chanctx functions for multi-channel phy support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: initialize more wcid fields mt76_wcid_init (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: split link specific data from struct mt7996_vif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add vif link specific data structure (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: rename struct mt76_vif to mt76_vif_link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add support for allocating a phy without hw (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: add code for emulating hardware scanning (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: do not add wcid entries to sta poll list during MCU reset (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: use mac80211 .sta_state op (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: fix omac index assignment after hardware reset (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: firmware restart on devices with a second pcie link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: hold dev->mutex while interacting with the thermal state (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: ensure that only one sta entry is active per mac address (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: only enable tx worker after setting the channel (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: decrease timeout for commonly issued MCU commands (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: reduce the number of command retries (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix rx filter setting for bfee functionality (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: fix eifs value on older chipsets (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: fix slot time for 5/6GHz (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: remove phy->monitor_vif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: remove mt76_calculate_default_rate() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: replace zero-length array with flexible-array member (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921: add rfkill_poll for hardware rfkill (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921: introduce CSA support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: config the dwell time by firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: do not hold queue lock during initial rx buffer alloc (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Properly handle responses for commands with events (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Cleanup MLO settings post-disconnection (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Init secondary link PM state (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Update secondary link PS flow (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Update mt7925_unassign_vif_chanctx for per-link BSS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Update mt792x_rx_get_wcid for per-link STA (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Update mt7925_mcu_sta_update for BC in ASSOC state (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: Enhance mt7925_mac_link_sta_add to support MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Enhance mt7925_mac_link_bss_add to support MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Fix CNM Timeout with Single Active Link in MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix wrong parameter for related cmd of chan info (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Fix incorrect WCID phy_idx assignment (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Fix incorrect WCID assignment for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: Fix incorrect MLD address in bss_mld_tlv for MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: connac: Extend mt76_connac_mcu_uni_add_dev for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: exclude tx backoff time from airtime (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: exclude tx backoff time from airtime (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: fix overflows seen when writing limit attributes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: fix overflows seen when writing limit attributes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix the invalid ip address for arp offload (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix get wrong chip cap from incorrect pointer (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix wrong band_idx setting when enable sniffer mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81384] {CVE-2024-57989}
  - wifi: mt76: introduce mt792x_config_mac_addr_list routine (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921: fix using incorrect group cipher after disconnection. (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: avoid double free in auth/assoc timeout (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: ibss: mark IBSS left before leaving (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: ibss: stop transmit when merging IBSS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: don't flush non-uploaded STAs (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-82497] {CVE-2025-21828}
  - wifi: mac80211: set key link ID to the deflink one (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: pass correct link ID on assoc (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: simplify nested if checks (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: simplify nested if checks (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Support parsing EPCS ML element (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Fix common size calculation for ML element (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: Add support for controlling EPCS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Support dynamic link addition and removal (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Pull link space calculation to a function (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Refactor adding association elements (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: Add support for dynamic addition/removal of links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: Split the links handling of an association request (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ieee80211: Add some missing MLO related definitions (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: fix nl80211_start_radar_detection return value (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: skip regulatory for punctured subchannels (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix tid removal during mesh forwarding (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: rename iwl_datapath_monitor_notif::mac_id to link_id (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: pcie: make iwl_pcie_d3_complete_suspend() static (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: pcie: make _iwl_trans_pcie_gen2_stop_device() static (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove unused tas_rsp variable (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: handle version 3 GET_TAS_STATUS notification (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: extend TAS_CONFIG cmd support for v5 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: remove Mr/Ms radio (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: add WIKO to PPAG approved list (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: support EMLSR on WH/PE (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: config: unify fw/pnvm MODULE_FIRMWARE (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: improve/fix chanctx min_def use logic (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: implement reset escalation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: implement product reset for TOP errors (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: get the max number of links from the firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: pcie: check for WiAMT/CSME presence (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: Move cfg80211_scan_req_add_chan() n_channels increment earlier (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: prohibit deactivating all links (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-58061}
  - wifi: mac80211: tests: add utility to create sdata skeleton (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: also verify requirements in EXT_SUPP_RATES (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: verify BSS membership selectors and basic rates (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: permit userspace to pass supported selectors (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: parse BSS selectors and unknown rates (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: skip all known membership selectors (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: log link information in ieee80211_determine_chan_mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix typo in HE MCS check (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Remove unused basic_rates variable (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: improve stop/wake queue tracing (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: check extended MLD capa/ops in assoc (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: scan: skip duplicate RNR entries (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: mlme: improve messages from config_bw() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: reject per-band vendor elements with MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: clarify key idx documententaion (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: remove an unneeded check in Rx (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add some support for RX OMI power saving (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: fix repeated words in comments (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Fix duplicated 'the' in comment (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Fix duplicated 'if' in comment (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Remove a duplicate assignment in iwl_dbgfs_amsdu_len_write() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Use helper function IS_ERR_OR_NULL() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Fix spelling typo in comment (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: api: remove the double word (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: fix iwl_ssid_exist() check (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Improve code style in pointer declarations (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: fix typo 'adderss' (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove unneeded NULL pointer checks (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: fix AP STA comparison (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: cleanup unused variable in trans.h (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: don't count mgmt frames as MPDU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: api: tdls: remove MVM_ from name (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: avoid NULL pointer dereference (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-82447] {CVE-2024-58062}
  - wifi: iwlwifi: bump FW API to 96 for BZ/SC devices (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: fix add stream vs. restart race (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: move fw_dbg_collect to fw debugfs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: api: remove version number from latest stored_beacon_notif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: avoid memory leak (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mark that we support TX_CMD_API_S_VER_10 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: add channel_load_not_by_us in iwl_mvm_phy_ctxt (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: add mapping of prph register crf for PE RF (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Allow entering EMLSR for more band combinations (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: iwl-drv: refactor image loading a bit (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Remove MVM prefix from TX API macros (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: rename bits in config/boot control register (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: move fw_ver debugfs to firmware runtime (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mld: make iwl_mvm_find_ie_offset a iwlwifi util (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: iwl_fw_error_collect() is always called sync (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: rework firmware error handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: restart device through NMI (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: unify cmd_queue_full() into nic_error() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: clean up FW restart a bit (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove STARTING state (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: restrict MAC start retry to timeouts (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: restrict driver retry loops to timeouts (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: return ERR_PTR from opmode start() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: context-info: add kernel-doc markers (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: interpret STEP URM BIOS configuration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: read STEP table from correct UEFI var (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: rename iwl_dev_tx_power_common::mac_context_id (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: skip short statistics window when updating EMLSR (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove warning on unallocated BAID (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: differentiate NIC error types (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Remove unused ieee80211_smps_is_restrictive (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Move TSO code to shared utility (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: add UHB canada support in GET_TAS_STATUS cmd resp (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: add UHB canada support in TAS_CONFIG cmd (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Use IWL_FW_CHECK() for BAR notif size validation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: pcie: Add support for new device ids (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: add a new NMI type (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Check BAR packet size before accessing data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: support BIOS override for UNII4 in CA/US also in LARI versions < 12 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: bump FW API to 95 for BZ/SC devices (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: log error for failures after D3 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: update documentation for iwl_nvm_channel_flags (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: Remove mvm prefix from iwl_mvm_compressed_ba_notif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mvm: Request periodic system statistics earlier (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: remove mvm from session protection cmd's name (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: copy multi-link element from the multi-link probe request's frame body to the generated elements (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: cleanup iwl_mvm_sta_del (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: change disassoc sequence a bit (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add an option to filter a sta from being flushed (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: send the right link id (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove pre-mld code from mld path (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fix documentation about initial values in station table (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Clean up debugfs_key deadcode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7921: fix a potential scan no APs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: Fix EHT NSS radiotap reporting. (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: Add eht radiotap tlv (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7615: Convert comma to semicolon (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81561] {CVE-2024-57990}
  - wifi: mt76: mt7921s: fix a potential firmware freeze during startup (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt792x: add P2P_DEVICE support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: set correct background radar capability (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: add support for more variants (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: mt7996: extend flexibility of mt7996_mcu_get_eeprom() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: remove get_task_comm() and print task comm directly (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - kernel-wide: add explicity||explicitly to spelling.txt (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add support for LED blinking (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: sdio: Fix disconnection after beacon loss (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8703b: Fix RX/TX issues (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Delete rf_type member of struct rtw_sta_info (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add USB PHY configuration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922ae: add variant info to support RTL8922AE-VS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: read hardware capabilities part 1 via firmware command (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81370] {CVE-2025-21729}
  - wifi: rtw89: mcc: consider time limits not divisible by 1024 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: treat first receiving part as first segment for 8922AE (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: avoid to init mgnt_entry list twice when WoWLAN failed (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21730}
  - wifi: rtw89: correct header conversion rule for MLO only (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: chan: fix soft lockup in rtw89_entity_recalc_mgnt_roles() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-57991}
  - wifi: rtw89: fix proceeding MCC with wrong scanning state after sequence changes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: cleanup ath9k_hw_get_nf_hist_mid() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support pdev Puncture Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support AST Entry Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Transmit Buffer OFDMA Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Transmit Rate Buffer Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: Add missing Return: to function documentation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rt2x00: Remove unused rfval values (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: Check the return value of of_property_read_string_index() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2025-21750}
  - wifi: wilc1000: unregister wiphy only if it has been registered (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-57992}
  - wifi: mt76: mt7996: fix invalid interface combinations (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - bus: mhi: host: pci_generic: Enable MSI-X if the endpoint supports (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix tx power, max reg power update to firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: set flag for mgmt no-ack frames in Tx completion (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Include MLO memory in firmware coredump collection (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: handle radar detection with MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix CAC running state during virtual interface start (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: rename CAC_RUNNING flag (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: disable PCI completion timeout control (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - bus: mhi: host: pci_generic: Add support for QDU100 device (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtl8xxxu: Fix RTL8188EU firmware upload block size (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: debug: print regd for QATAR/UK/THAILAND (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: adjust thermal protection step and more RTL8852BE-VT ID (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: usb: Preallocate and reuse the RX skbs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Handle C2H_ADAPTIVITY in rtw_fw_c2h_cmd_handle() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: usb: Copy instead of cloning the RX skb (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8821a/8812a: Set ptct_efuse_size to 0 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8812a: Support RFE type 2 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: rtl8821ae: Fix media status report (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: add __packed attribute to efuse layout struct (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix spelling mistake "requestted" -> "requested" (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Avoid explicit type cast in monitor status parse handler (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Change the Tx monitor SRNG ring ID (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Remove unused HAL Rx mask in DP monitor path (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix incorrect TID updation in DP monitor status path (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix the misspelled of hal TLV tag HAL_PHYRX_GENERICHT_SIG (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: cleanup Rx peer statistics structure (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor monitor status TLV structure (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add documentation HTT_H2T_MSG_TYPE_RX_RING_SELECTION_CFG (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Decrease ath12k_mac_station_assoc() stack usage (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Decrease ath12k_sta_rc_update_wk() stack usage (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Decrease ath12k_bss_assoc() stack usage (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Decrease ath12k_mac_op_remain_on_channel() stack usage (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add support for parsing 64-bit TLVs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: simplify internal time management (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: cleanup a few (mostly) TX-related routines (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: cleanup ath_txq_skb_done() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: clarify unmodifiable headroom log message (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: advertise MLO support and capabilities (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: assign unique hardware link IDs during QMI host cap (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add ATH12K_FW_FEATURE_MLO capability firmware feature (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: remove warning print in htt mlo offset event message (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add no-op without debug print in WMI Rx event (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add can_activate_links mac operation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: symmetrize scan vdev creation and deletion during HW scan (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: pass link ID during MLO while delivering skb (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix ar->supports_6ghz usage during hw register (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix ath12k_qmi_alloc_chunk() to handle too large allocations (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: advertise multi device interface combination (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor radio frequency information (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: introduce interface combination cleanup helper (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add helper function to init partner cmem configuration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add partner device buffer support in receive data path (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: move to HW link id based receive handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: avoid redundant code in DP Rx error process (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: enable MLO setup and teardown from core (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add MLO WMI setup and teardown functions (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add support to allocate MLO global memory region (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: refactor ath12k_qmi_alloc_target_mem_chunk() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: send partner device details in QMI MLO capability (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: Describe ath12k PCI module with WSI (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: parse multiple device information from Device Tree (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: add missing header include for brcmf_dbg (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81283] {CVE-2024-58014}
  - wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81445] {CVE-2024-57995}
  - wifi: rtw89: phy: add dummy C2H event handler for report of TAS power (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8851b: rfk: remove unnecessary assignment of return value of _dpk_dgain_read() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852c: rfk: refine target channel calculation in _rx_dck_channel_calc() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: pci: wait for firmware loading before releasing memory (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-58063}
  - wifi: rtlwifi: destroy workqueue at rtl_deinit_core (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: remove unused check_buddy_priv (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-82463] {CVE-2024-58072}
  - wifi: rtw89: 8922a: update format of RFK pre-notify H2C command v2 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: regd: update regulatory map to R68-R51 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852c: disable ER SU when 4x HE-LTF and 0.8 GI capability differ (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: disable firmware training HE GI and LTF (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: ps: update data for firmware and settings for hardware before/after PS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: ps: refactor channel info to firmware before entering PS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: ps: refactor PS flow to support MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Off by one in ath12k_wmi_process_csa_switch_count_event() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix leaking michael_mic for non-primary links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: decrease timeout waiting for host sleep from 10s to 5s (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: fix brcmf_vif_clear_mgmt_ies when stopping AP (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: fix scatter-gather handling by detecting end of sg list (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: introduce mlo_capable flag for device group (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: send QMI host capability after device group is ready (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: move struct ath12k_hw from per device to group (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: refactor core start based on hardware group (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: introduce device group abstraction (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: rename mlo_capable_flags to single_chip_mlo_supp (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: move ATH12K_FLAG_REGISTERED handling to ath12k_mac_register() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: add crystal_cap check to avoid setting as overflow value (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: refine link handling for link_sta_rc_update (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: use RSSI from PHY report in RX descriptor (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852bt: add beacon filter and CQM support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852b: add beacon filter and CQM support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: Extend channel info field length for scan (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211_hwsim: add 6 GHz EHT Mesh capabilities (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add EHT 320 MHz support for mesh (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: ethtool: add monitor channel reporting (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: get tx power per link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: send MLO links tx power info in GET_INTERFACE (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Replace spaces for tabs in iwl_mvm_vendor_events_idx (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: use wiphy guard (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: define and use wiphy guard (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Accept authentication frames on P2P device (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix variable used in for_each_sdata_link() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix vif addr when switching from monitor to station (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-57899}
  - bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: introduce QMI firmware ready flag (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add ath12k_get_num_hw() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add ath12k_ab_to_ah() and ath12k_ab_set_ah() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor core startup (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_op_sta_rc_update(): use mac80211 provided link id (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_op_set_key(): fix uninitialized symbol 'ret' (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: defer vdev creation for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_bss_assoc(): MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: do not return invalid link id for scan link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_station_add(): fix potential rx_stats leak (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_op_ampdu_action(): MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_op_flush(): MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_op_tx(): MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: convert struct ath12k::wmi_mgmt_tx_work to struct wiphy_work (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pass target link_id to ieee80211_nullfunc_get() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pass target link_id to ieee80211_gtk_rekey_add() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: apply MLD pairwise key to dynamically active links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: implement ops of change vif/sta links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: register ops of can_activate_links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: configure AP_LINK_PS if FW supports (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Use mac80211 sta's link_sta instead of deflink (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Use mac80211 vif's link_conf instead of bss_conf (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify chanctx iterators for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add reo queue lookup table for ML peers (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: use arsta instead of sta (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add primary link for data path operations (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: support change_sta_links() mac80211 op (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add MLO station state change handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: mark ath11k_wow_convert_8023_to_80211() as noinline (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: mark ath11k_dp_rx_mon_mpdu_pop() as noinline (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: mark some QMI driver event helpers as noinline (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix inappropriate use of print_array_to_buf_index() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: add support for QCA6698AQ (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: miscellaneous spelling fixes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: cleanup struct ath11k_mon_data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: cleanup struct ath11k_reg_tpc_power_info (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: cleanup struct ath11k_vif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix endianness issue in struct hal_tlv_64_hdr (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: usb: Enable RX aggregation for 8821au/8812au (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: usb: Support USB 3 with RTL8812AU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support MBSSID Control Frame Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Transmit PER Rate Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support SoC Common Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support phy counter and TPC stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Downlink Pager Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: Add RX inactivity detection and reset chip when it occurs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtl8xxxu: add more missing rtl8192cu USB IDs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: handle different TX power between RF path (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: introduce dynamic antenna gain feature (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: sar: tweak 6GHz SAR subbands span (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: fix init_sw_vars leak when probe fails (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: wait for firmware loading before releasing memory (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: do not complete firmware loading needlessly (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add additional USB IDs for RTL8812BU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8812au: Add more device IDs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8821au: Add additional devices to the USB_DEVICE list (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Fix for out-of bound access error (Jose Ignacio Tornos Martinez) [RHEL-79791 RHEL-81420] {CVE-2024-58015}
  - wifi: ath9k: miscellaneous spelling fixes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: pass MBSSID config by reference (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Support EHT 1024 aggregation size in TX (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: rfkill: gpio: Add check for clk_enable() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-56593}
  - wifi: brcmfmac: release 'root' node in all execution paths (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: don't call power_update_mac in fast suspend (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: s/IWL_MVM_INVALID_STA/IWL_INVALID_STA (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: bump minimum API version in BZ/SC to 92 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: move IWL_LMAC_*_INDEX to fw/api/context.h (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: be less noisy if the NIC is dead in S3 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: support new initiator and responder command version (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: use wiphy locked debugfs for low-latency (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: MLO scan upon channel condition degradation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: support new versions of the wowlan APIs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: allow always calling iwl_mvm_get_bss_vif() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: unify link info initialization (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: clarify fw_id_to_link_sta protection (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: Fix an error handling path in nl80211_start_ap() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: fix description of ieee80211_set_active_links() for new sequence (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - _RESEND_PATCH_v2_04_19_wifi_rt2x00_Remove_redundant_hrtimer_init_ (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add MLO peer assoc command support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add helper to find multi-link station (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add multi-link flag in peer create command (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add helpers for multi link peer creation and deletion (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: introduce ath12k_hw_warn() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Refactor sta state machine (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: MLO vdev bringup changes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_vdev_create(): use goto for error handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: mark QMI driver event helpers as noinline (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: Suspend hardware before firmware mode off for WCN6750 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: Remove some exhalbtc deadcode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Enable the new RTL8821AU/RTL8812AU drivers (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw8821au.c and rtw8812au.c (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw8812a.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw8821a.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw88xxa.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw8821a_table.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add rtw8812a_table.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: set higher priority to BT when WL scan and BT A2DP exist (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852b: change RF mode to normal mode when set channel (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: fill the missing OP1dB configuration (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: mac: no configure CMAC/DMAC tables for firmware secure boot (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fw: use common function to parse security section for WiFi 6 chips (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fw: move v1 MSSC out of __parse_security_section() to share with v0 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fw: set recorded IDMEM share mode in firmware header to register (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fw: shrink download size of security section for RTL8852B (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: efuse: read firmware secure info v0 from efuse for WiFi 6 chips (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: efuse: move recognize firmware MSS info v1 to common (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: efuse: move reading efuse of fw secure info to common (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: set pause_data field to avoid transmitting data in scan channels (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: don't check done-ack for entering PS (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcm80211: Remove unused dma_txflush() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8812a: Mitigate beacon loss (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: 8821a: Regularly ask for BT info updates (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: coex: Support chips without a scoreboard (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Detect beacon loss with chips other than 8822c (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: usb: Set pkt_info.ls for the reserved page (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Move pwr_track_tbl to struct rtw_rfe_def (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Support TX page sizes bigger than 128 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Make txagc_remnant_ofdm an array (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Enable data rate fallback for older chips (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Let each driver control the power on/off process (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Allow rtw_chip_info.ltecoex_addr to be NULL (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Extend the init table parsing for RTL8812AU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Allow different C2H RA report sizes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Dump the HW features only for some chips (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Add some definitions for RTL8821AU/RTL8812AU (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Report the signal strength only if it's known (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: extend RFK handling and consider MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: tweak setting of channel and TX power for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: chan: manage active interfaces (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: Add encryption support for MLO connections (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: Add header conversion for MLO connections (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: convert tasklet to BH workqueue for CE interrupts (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: unlock on error path in rtw89_ops_unassign_vif_chanctx() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: Set Wi-Fi/Bluetooth priority for Wi-Fi scan case (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: fix -Wenum-compare-conditional warnings (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: use MODULE_FIRMWARE() to declare used firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Refactor looping in rtw_phy_store_tx_power_by_rate (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: regd: block 6 GHz if marked as N/A in regd map (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: add quirks by PCI subsystem ID for thermal protection (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: add thermal protection (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix A-MSDU indication in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: use tail MSDU to get MSDU information (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: delete NSS and TX power setting for monitor vdev (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix struct hal_rx_mpdu_start (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix struct hal_rx_ppdu_start (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix struct hal_rx_ppdu_end_user_stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: remove unused variable monitor_present (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - mac80211: Remove NOP call to ieee80211_hw_config (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: work around -Wenum-compare-conditional warning (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: re-order assigning channel in activate links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - fs: debugfs: fix open proxy for unsafe files (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - debugfs: fix missing mutex_destroy() in short_fops case (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - fs: debugfs: differentiate short fops with proxy ops (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: convert debugfs files to short fops (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - debugfs: add small file operations for most files (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - debugfs: Document that debugfs_create functions need not be error checked (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - debugfs: lockdown: Allow reading debugfs files that are not world readable (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: remove misleading j_0 construction parts (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211_hwsim: use hrtimer_active() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: refactor BW limitation check for CSA parsing (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: filter on monitor interfaces based on configured channel (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: refactor ieee80211_rx_monitor (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add support for the monitor SKIP_TX flag (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: add monitor SKIP_TX flag (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add flag to opt out of virtual monitor support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: pass net_device to .set_monitor_channel (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: remove status->ampdu_delimiter_crc (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: report per wiphy radio antenna mask (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: use vif radio mask to limit creating chanctx (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: use vif radio mask to limit ibss scan frequencies (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: add option for vif allowed radios (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: allow IWL_FW_CHECK() with just a string (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove redundant check (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: add an error table status getter (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: do not warn about a flush with an empty TX queue (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove IWL_MVM_HW_CSUM_DISABLE (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: remove unneeded check (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Remove redundant rcu_read_lock() in reorder buffer (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Remove unused last_amsdu from reorder buffer (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: fw: api: update link context API version (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: log information about HW restart completion (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: prepare the tx_power handling to be per-link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: exit EMLSR earlier if bss_param_ch_cnt is updated (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: iwlwifi: mvm: Add support for prep_add_interface() callback (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: expose ieee80211_chan_width_to_rx_bw() to drivers (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: chan: calculate min_def also for client mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: add an option to fake ieee80211_connection_loss (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: parse A-MSDU len from EHT capabilities (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: call rate_control_rate_update() for link STA (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: allow rate_control_rate_init() for links (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: update the right link for tx power (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: __ieee80211_recalc_txpower receives a link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: ieee80211_recalc_txpower receives a link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: remove unneeded parameters (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: make bss_param_ch_cnt available for the low level driver (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: rename IEEE80211_CHANCTX_CHANGE_MIN_WIDTH (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: disallow SMPS in AP mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: Add support to indicate that a new interface is to be added (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: sar: add supported UNII-4 frequency range along with UNII-3 of SAR subband (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852c: use 'int' as return type of error code pwr_{on,off}_func() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852bt: use 'int' as return type of error code pwr_{on,off}_func() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852b: use 'int' as return type of error code pwr_{on,off}_func() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8851b: use 'int' as return type of error code pwr_{on,off}_func() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: use 'int' as return type of error code in poll_{tx,rx}dma_ch_idle() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: wow: cast nd_config->delay to u64 in tsf arithmetic (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-56539}
  - wifi: brcmfmac: of: use devm_clk_get_optional_enabled_with_rate() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - clk: provide devm_clk_get_optional_enabled_with_rate() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmsmac: Remove unused brcms_debugfs_get_devdir() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: Remove unused brcmf_cfg80211_get_iftype() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Set MAC after operation mode (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: cleanup struct mwifiex_private (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: cleanup struct mwifiex_auto_tdls_peer (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Add WILC3000 support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Register wiphy after reading out chipid (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Fold wilc_create_wiphy() into cfg80211.c (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Fill in missing error handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Fold chip_allow_sleep()/chip_wakeup() into wlan.c (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Clean up usage of wilc_get_chipid() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wilc1000: Keep slot powered on during suspend/resume (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rt2x00: convert comma to semicolon (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify link arvif creation and removal for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: update ath12k_mac_op_update_vif_offload() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: update ath12k_mac_op_conf_tx() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify ath12k_mac_op_set_key() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify ath12k_mac_op_bss_info_changed() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify ath12k_get_arvif_iter() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: modify ath12k_mac_vif_chan() for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: prepare vif config caching for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: prepare sta data structure for MLO handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: pass ath12k_link_vif instead of vif/ahvif (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: prepare vif data structure for MLO handling (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support BE OFDMA Pdev Rate Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Pdev Scheduled Algorithm Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support DMAC Reset Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Add firmware coredump collection support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: add missing lockdep_assert_wiphy() for ath12k_mac_op_ functions (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath10k: avoid NULL pointer error during sdio remove (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-56599}
  - wifi: ath12k: ath12k_mac_op_sta_state(): clean up update_wk cancellation (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: ath12k_mac_set_key(): remove exit label (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: cleanup unneeded labels (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: switch to using wiphy_lock() and remove ar->conf_mutex (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: convert struct ath12k_sta::update_wk to use struct wiphy_work (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-56607}
  - wifi: ath12k: Support Pdev OBSS Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support pdev CCA Stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support pdev Transmit Multi-user stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Ring and SFM stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Support Self-Generated Transmit stats (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: wow: do not configure CPU IO to receive packets for old firmware (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: Add function to reorder Wi-Fi firmware report index (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: Solved BT PAN profile idle decrease Wi-Fi throughput (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: Reorder Bluetooth info related logic (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: coex: Update priority setting for Wi-Fi is scanning (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - Revert "wifi: cfg80211: unexport wireless_nlevent_flush()" (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wireless: wext: shorten struct iw_ioctl_description (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: unexport wireless_nlevent_flush() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: remove iw_public_data from struct net_device (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: cfg80211: stop exporting wext symbols (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: wext/libipw: move spy implementation to libipw (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ipw2x00/lib80211: move remaining lib80211 into libipw (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: don't include lib80211.h (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: nl80211: remove redundant null pointer check in coalescing (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - mac80211: Reorganize kerneldoc parameter names (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211, cfg80211: miscellaneous spelling fixes (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mac80211: constify ieee80211_ie_build_{he,eht}_oper() chandef (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: Modify print_array_to_buf() to support arrays with 1-based semantics (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: debug: add beacon RSSI for debugging (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - bus: mhi: host: Fix typos in the comments (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: handle entity active flag per PHY (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: initialize dual HW bands for MLO and control them by link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852ce: set offset K of PCI PHY EQ to manual mode to improve compatibility (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852ce: fix gray code conversion for filter out EQ (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922ae: disable PCI PHY EQ to improve compatibility (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: pci: consolidate PCI basic configurations for probe and resume (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: move txbaddr/rxbaddr into struct ath12k_dp (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: allow missing memory-regions (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: fix the stack frame size warning in ath11k_vif_wow_set_wakeups (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: enable fw_wmi_diag_event hw param for WCN6750 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath11k: Fix double free issue during SRNG deinit (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath10k: fix the stack frame size warning in ath10k_hw_scan (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath10k: fix the stack frame size warning in ath10k_remain_on_channel (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: Parse the RX descriptor with a single function (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8852c: rfk: remove unnecessary assignment of return value of _dpk_dgain_read() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: tweak driver architecture for impending MLO support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: refactor STA related func ahead for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: refactor VIF related func ahead for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: read link_sta corresponding to the link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: read bss_conf corresponding to the link (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: rename rtw89_sta to rtw89_sta_link ahead for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: rename rtw89_vif to rtw89_vif_link ahead for MLO (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (Jose Ignacio Tornos Martinez) [RHEL-79791] {CVE-2024-56609}
  - wifi: rtw88: Constify some arrays and structs (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: rfk: update firmware debug log of DACK to v2 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: rfk: add firmware debug log of IQK (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: rfk: add firmware debug log of TSSI (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: rfk: support firmware command RX DCK v1 format (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtw89: 8922a: rfk: enlarge TSSI timeout time to 20ms (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: rtlwifi: make read-only arrays static const (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath12k: make read-only array svc_id static const (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: remove ath9k_platform_data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: btcoex: remove platform_data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: eeprom: remove platform data (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: brcm4329-fmac: add clock description for AP6275P (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: brcm4329-fmac: add pci14e4,449d (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: brcm,bcm4329-fmac: Add CYW43439 DT binding (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: brcm,bcm4329-fmac: allow generic properties (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: wireless: brcm,bcm4329-fmac: add BCM4366 binding (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - ARM: dts: BCM5301X: Add Netgear R8000 WiFi regulator mappings (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: bcm4329-fmac: Add Apple properties & chips (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: bcm4329-fmac: add optional brcm,ccode-map-trivial (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: add flag for random seed during firmware download (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: Add optional lpo clock enable support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: brcmfmac: of: Make use of irq_get_trigger_type() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: ath9k: use clamp() in ar9003_aic_cal_post_process() (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - wifi: mt76: move wed common utilities in wed.c (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: mtk_ppe: prefer newly added l2 flows (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: add code for offloading flows from wlan devices (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: support creating mac address based offload entries (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: remove bridge flow offload type entry support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: rework hardware flow table management (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: allocate struct mtk_ppe separately (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: support TC_SETUP_BLOCK for PPE offload (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: add ipv6 flow offload support (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: implement flow offloading to WED devices (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: arm: mediatek: document the pcie mirror node on MT7622 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: arm: mediatek: document WED binding for MT7622 (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - arm64: dts: mediatek: mt7622: add support for coherent DMA (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: add support for coherent DMA (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - dt-bindings: net: mediatek: add optional properties for the SoC ethernet core (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - net: ethernet: mtk_eth_soc: avoid creating duplicate offload entries (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-79791]
  - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (CKI Backport Bot) [RHEL-91108]
  - jiffies: Define secs_to_jiffies() (CKI Backport Bot) [RHEL-91108]
  - smp,csd: Throw an error if a CSD lock is stuck for too long (Waiman Long) [RHEL-16867]
  - smp: Reduce NMI traffic from CSD waiters to CSD destination (Waiman Long) [RHEL-16867]
  - smp: Reduce logging due to dump_stack of CSD waiters (Waiman Long) [RHEL-16867]
  - locking/csd_lock: Remove per-CPU data indirection from CSD lock debugging (Waiman Long) [RHEL-16867]
  - smp: Fix offline cpu check in flush_smp_call_function_queue() (Waiman Long) [RHEL-16867]
  - vmxnet3: unregister xdp rxq info in the reset path (Izabela Bakollari) [RHEL-30011]
  - acct: perform last write from workqueue (Waiman Long) [RHEL-83160] {CVE-2025-21846}
  - kernel/acct.c: use dedicated helper to access rlimit values (Waiman Long) [RHEL-83160]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-590.el9]
changelog:
  - cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87940] {CVE-2025-21963}
  - perf test: Update event_groups test to use instructions (Michael Petlan) [RHEL-80165]
  - xfrm: Support ESN context update to hardware for TX (CKI Backport Bot) [RHEL-86504]
  - redhat: Add packing_test to mod-internal.list (Petr Oros) [RHEL-92666]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-92666]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (Petr Oros) [RHEL-92666]
  - lib: packing: document recently added APIs (Petr Oros) [RHEL-92666]
  - lib: packing: add pack_fields() and unpack_fields() (Petr Oros) [RHEL-92666]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (Petr Oros) [RHEL-92666]
  - lib: packing: create __pack() and __unpack() variants without error checking (Petr Oros) [RHEL-92666]
  - lib: packing: use GENMASK() for box_mask (Petr Oros) [RHEL-92666]
  - lib: packing: use BITS_PER_BYTE instead of 8 (Petr Oros) [RHEL-92666]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (Petr Oros) [RHEL-92666]
  - lib: packing: add additional KUnit tests (Petr Oros) [RHEL-92666]
  - lib: packing: add KUnit tests adapted from selftests (Petr Oros) [RHEL-92666]
  - lib: packing: duplicate pack() and unpack() implementations (Petr Oros) [RHEL-92666]
  - lib: packing: add pack() and unpack() wrappers over packing() (Petr Oros) [RHEL-92666]
  - lib: packing: remove kernel-doc from header file (Petr Oros) [RHEL-92666]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (Petr Oros) [RHEL-92666]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (Petr Oros) [RHEL-92666]
  - lib: packing: remove MODULE_LICENSE in non-modules (Petr Oros) [RHEL-92666]
  - Documentation: core-api: packing: correct spelling (Petr Oros) [RHEL-92666]
  - lib: packing: replace bit_reverse() with bitrev8() (Petr Oros) [RHEL-92666]
  - Revert "SUNRPC: Revert e0a912e8ddba" (Benjamin Coddington) [RHEL-92060]
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Use devres for remove as well (Jaroslav Kysela) [RHEL-80682]
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Jaroslav Kysela) [RHEL-80682]
  - tools headers: Update the linux/unaligned.h copy with the kernel sources (Jaroslav Kysela) [RHEL-80682]
  - soundwire: take in count the bandwidth of a prepared stream (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() (Jaroslav Kysela) [RHEL-80682] {CVE-2025-39930}
  - ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: separate DJM-A9 cap lvl options (Jaroslav Kysela) [RHEL-80682]
  - PCI: pci_ids: add INTEL_HDA_PTL_H (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: convert to SYSTEM_SLEEP_PM_OPS (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt722-sdca: add missing readable registers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: Fix maximum ADC Volume (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ops: Consistently treat platform_max as control value (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt1320: set wake_capable = 0 explicitly (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: update ALC222 depop optimize (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: Add jack delay debounce after suspend (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wsa884x: report temps to hwmon in millidegree of Celsius (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usx2y: validate nrpacks module parameter on probe (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Avoid module auto-load handling at event delivery (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Remove (revert) duplicate Ally X config (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l56: Prevent races when soft-resetting using SPI control (Jaroslav Kysela) [RHEL-80682]
  - firmware: cs_dsp: Remove async regmap writes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: warn both sdw and pch dmic are used (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: don't check number of sdw links when set dmic_fixup (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl: Rename stream name of SAI DAI driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: es8328: fix route from DAC to output (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2764: Set the SDOUT polarity correctly (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2764: Fix power control mask (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Drop UMP events when no UMP-conversion is set (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2770: Fix volume scale (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/cirrus: Reduce codec resume time (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/cirrus: Correct the full scale volume set logic (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: imx-audmix: remove cpu_mclk which is from cpu dai device (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fixup ALC225 depop procedure (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l41: Fix acpi_device_hid() not found (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Add branch prediction hint in ACP IRQ handler (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Drop unused includes from Vangogh driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Add post_fw_run_delay ACP quirk (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: revise typo of rt713_vb_l2_rt1320_l13 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: revise typo of rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: hda-intel: add Panther Lake-H support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: pci-ptl: Add support for PTL-H (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: intel-dsp-config: Add PTL-H support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: drop a redundant code (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (Jaroslav Kysela) [RHEL-80682] {CVE-2025-21870}
  - ASoC: cs35l41: Fallback to using HID for system_name if no SUB is available (Jaroslav Kysela) [RHEL-80682]
  - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays. (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Limit mic boost on Positivo ARN50 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils.c: add missing dlc->of_node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB] (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-tgl-match: declare adr as ull (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add support for Fatcat board with BT offload enabled in PTL platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix headset detection failure due to unstable sort (Jaroslav Kysela) [RHEL-80682]
  - ALSA: pcm: use new array-copying-wrapper (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codec: es8316: "DAC Soft Ramp Rate" is just a 2 bit control (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: acp: Fix possible deadlock (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix quirk matching for Legion Pro 7 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: renesas: SND_SIU_MIGOR should depend on DMADEVICES (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Jaroslav Kysela) [RHEL-80682]
  - ASoC: da7213: Initialize the mutex (Jaroslav Kysela) [RHEL-80682]
  - ASoC: use to_platform_device() instead of container_of() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: acp: Support microphone from Lenovo Go S (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8m: Add entry for new 8M Plus revision (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8: Add entries for new 8QM and 8QXP revisions (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx: Add mach entry to select cs42888 topology (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: select CONFIG_DMA_SHARED_BUFFER (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8m: add SAI2,5,6,7 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix return code from poll ops (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix incorrect resp->opcode retrieval (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix meter_levels type to __le32 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: ES8326: Improved PSRR (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: return error value in asrc_m2m_device_run() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: only handle pairs for m2m in the suspend (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix hwdep read ops types (Jaroslav Kysela) [RHEL-80682]
  - ALSA: scarlett2: Add device_setup option to use FCP driver (Jaroslav Kysela) [RHEL-80682]
  - ALSA: FCP: Add Focusrite Control Protocol driver (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Support for Ideapad hotkey mute LEDs (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dapm: add support for preparing streams (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-dai: add snd_soc_dai_prepare() and use it internally (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Add delay quirk for USB Audio Device (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Transfer firmware in two chunks (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Make tied_device=0 as default / unknown (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-dapm: remove !card check from snd_soc_dapm_set_bias_level() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: fsl,micfil: Add compatible string for i.MX943 platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Add i.MX943 platform support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: Use ARRAY_SIZE() to calculate PEB2466_TLV_SIZE (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: Use str_yes_no() to improve bdw_dump() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: return 0 if np was NULL on snd_soc_daifmt_parse_clock_provider_raw() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: audio-graph-card: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: nau8824: fix max volume for Speaker output (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: fsl,mqs: Add compatible string for i.MX943 platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_mqs: Add i.MX943 platform support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: line6: convert timeouts to secs_to_jiffies() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Notify UMP EP and FB changes (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Allow system notification in atomic (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Update rawmidi name per EP name update (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Copy safe string name to rawmidi (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Copy FB name string more safely (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Bump protocol version to 2.0.5 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Show substream activity in info ioctl (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Expose the tied device number in info ioctl (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card: Drop unnecessary "dai-tdm-slot-width-map" property presence check (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sb: Use str_enabled_disabled() helper in info_read() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: emu10k1: Use str_yes_no() helper (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Use of_property_present() for non-boolean properties (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: Add ACPI dependency to fix build error (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rme9652: Simplify with str_yes_no() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Simplify with str_yes_no() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Add missing includes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Adjust IPC traces (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Adjust DSP status register names (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Update ASRC definition (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Improve logging of firmware loading (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Clearly state assumptions of hw_params() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Add MODULE_FIRMWARE to inform about FW (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Print IPC error messages in lower layer (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Update hda component teardown sequences (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix init-config parsing (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix theoretical infinite loop (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix the minimum firmware version numbers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Do not readq() u32 registers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-card: remove card check (Jaroslav Kysela) [RHEL-80682]
  - ALSA: firewire: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - regmap: sdw-mbq: Add support for SDCA deferred controls (Jaroslav Kysela) [RHEL-80682]
  - regmap: sdw-mbq: Add support for further MBQ register sizes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Update list of entity_0 controls (Jaroslav Kysela) [RHEL-80682]
  - soundwire: SDCA: Add additional SDCA address macros (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Simplify with str_enable_disable() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: oss: Simplify with str_enabled_disabled() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: emu10k1: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hdspm: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sonicvibes: Simplify with str_off_on() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: trident: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt5682: Support the ALC5682I-VE codec (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ens137x: Use str_on_off() helper in snd_ensoniq_proc_read() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: madera: Use str_enabled_disabled() helper function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: Use str_yes_no() helper in atom_dump() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: Add aw88083 amplifier driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: Add schema for "awinic,aw88083" (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple_card: Show if link is unidirectional (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple_card: Improve debugging messages (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Make dependency on UMP clearer (Jaroslav Kysela) [RHEL-80682]
  - ALSA: Align the syntax of iov_iter helpers with standard ones (Jaroslav Kysela) [RHEL-80682]
  - ALSA: AC97: Use str_on_off() helper in snd_ac97_proc_read_main() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add a comment for alc_fixup_inv_dmic() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Split function type patching and function naming (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add missing function type names (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add bounds check for function address (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Clean up error messages (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add missing header includes (Jaroslav Kysela) [RHEL-80682]
  - soundwire: amd: clear wake enable register for power off mode (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: count the bandwidth of active streams only (Jaroslav Kysela) [RHEL-80682]
  - SoundWire: pass stream to compute_params() (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: add lane in sdw_group_params (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: select data lane (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: check required freq accurately (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: correct clk_freq check in sdw_select_row_col (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: generic_bandwidth_allocation: set frame shape on fly (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: stream: program BUSCLOCK_SCALE (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: add sdw_slave_get_scale_index helper (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: skip DEPREPARED streams (Jaroslav Kysela) [RHEL-80682]
  - soundwire: stream: set DEPREPARED state earlier (Jaroslav Kysela) [RHEL-80682]
  - soundwire: add lane_used_bandwidth in struct sdw_bus (Jaroslav Kysela) [RHEL-80682]
  - soundwire: mipi_disco: read lane mapping properties from ACPI (Jaroslav Kysela) [RHEL-80682]
  - soundwire: add lane field in sdw_port_runtime (Jaroslav Kysela) [RHEL-80682]
  - soundwire: bus: Move irq mapping cleanup into devres (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ad1889: Use str_enabled_disabled() helper function (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hdsp: Use str_on_off() and str_yes_no() helper functions (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: force cast for snd_pcm_format_t type (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: remove redundant assignment to variable ret (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: don't include '<linux/find.h>' directly (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Increase the SoundWire attach timeout (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Use gpiod_set_raw for GPIO operations (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Prepare support for updated bios patch (Jaroslav Kysela) [RHEL-80682]
  - ASoC: qcom: sdm845: add handling of secondary MI2S clock (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt715: Remove unused hda_to_sdw (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: Unify clock direction by clk_direction (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: tidyup ret handling for card->disable_route_checks (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: mtl-match: Add CDB35L56-EIGHT-C 8x CS35L56 without CS42L43 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: mtl-match: Add CDB35L56-EIGHT-C with aggregated speakers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: tgl-match: Add entries for CS35L56 on CDB35L56-EIGHT-C (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: sof-priv: Remove unused SOF_DAI_STREAM() and SOF_FORMATS (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: ipc4-topology: Use macro to set the EXT_PARAM_SIZE in widget setup (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: hda-pcm: Follow the pause_supported flag to drop PAUSE support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Add support for pause supported tokens from topology (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_easrc: register m2m platform device (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc: register m2m platform device (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: Add memory to memory function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_easrc: define functions for memory to memory usage (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc: define functions for memory to memory usage (Jaroslav Kysela) [RHEL-80682]
  - ALSA: compress: Add output rate and output format support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sonicvibes: Use str_on_off() helper in snd_sonicvibes_proc_read() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: convert rt5682.txt to dt-schema (Jaroslav Kysela) [RHEL-80682]
  - ASoC: wm8985: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: wm8904: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tpa6130a2: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320aic3x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320aic31xx: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320adc3xxx: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas5720: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2562: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ssm2602: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: pcm186x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98095: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98090: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98088: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: alc5632: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: alc5623: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1977: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1781: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1761: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ad193x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: qcom,wcd9335: Drop number of DAIs from the header (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wcd9335: Add define for number of DAIs (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt713_vb_l2_rt1320_l13 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-lnl-match: add rt713_vb_l2_rt1320_l13 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add a dev_dbg message for the SOC_SDW_CODEC_MIC quirk (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Correct quirk for Lenovo Yoga Slim 7 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: improve the log of DAI link numbers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: reduce log level for not using internal dmic (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: correct mach_params->dmic_num (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: use for_each_of_graph_port() on graph_get_dai_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: check port reg first on graph_get_dai_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_sai: Add sample rate constraint (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Add sample rate constraint (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Switch to common sample rate constraint function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_utils: Add function to constrain rates (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: oss: fix typo in seq_oss_init.c (Jaroslav Kysela) [RHEL-80682]
  - ALSA: cmipci: Modify the incorrect format specifier (Jaroslav Kysela) [RHEL-80682]
  - ALSA: lola: Fix typo in lola_clock.c (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: ps: add ZSC control register programming sequence (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: ps: update mach params subsystem_rev variable (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Always check capability at opening a hwdep (Jaroslav Kysela) [RHEL-80682]
  - ASoC: sdw_utils: cs_amp: Assign non-overlapping TDM masks for each codec on a bus (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l56: Split SoundWire DAI into separate playback and capture (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix typo in hda_sysfs.h (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ac97: Modify the incorrect format specifier (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Skip notifications unless subscribed to announce port (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Notify client and port info changes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l51: Constify struct i2c_device_id (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: Fix redundant logical jump (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Add suspend and resume support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Use regmap for PHY and PLL registers (Jaroslav Kysela) [RHEL-80682]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-591.el9]
changelog:
  - uki_addons: add 'fedora' SBAT suffix for UKI addons (Li Tian) [RHEL-93399]
  - Subject: net/smc: check return value of sock_recvmsg when draining clc data (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: protect link down work from execute after lgr freed (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: Introduce IPPROTO_SMC (Mete Durlu) [RHEL-73484]
  - net/smc: expose smc proto operations (Mete Durlu) [RHEL-73484]
  - net/smc: refactoring initialization of smc sock (Mete Durlu) [RHEL-73484]
  - net/smc: change SMCR_RMBE_SIZES from 5 to 15 (Mete Durlu) [RHEL-73484]
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Mete Durlu) [RHEL-73484]
  - net/smc: implement DMB-merged operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - net/smc: adapt cursor update when sndbuf and peer DMB are merged (Mete Durlu) [RHEL-73484]
  - net/smc: add operations to merge sndbuf with peer DMB (Mete Durlu) [RHEL-73484]
  - net/smc: register loopback-ism into SMC-D device list (Mete Durlu) [RHEL-73484]
  - net/smc: ignore loopback-ism when dumping SMC-D devices (Mete Durlu) [RHEL-73484]
  - net/smc: mark optional smcd_ops and check for support when called (Mete Durlu) [RHEL-73484]
  - net/smc: implement DMB-related operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - net/smc: implement ID-related operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - redhat/configs: Add SMC_LO config option (Mete Durlu) [RHEL-73484]
  - net/smc: introduce loopback-ism for SMC intra-OS shortcut (Mete Durlu) [RHEL-73484]
  - net/smc: decouple ism_client from SMC-D DMB registration (Mete Durlu) [RHEL-73484]
  - net/smc: Avoid -Wflex-array-member-not-at-end warnings (Mete Durlu) [RHEL-73484]
  - net/smc: make smc_hash_sk/smc_unhash_sk static (Mete Durlu) [RHEL-73484]
  - net/smc: change the term virtual ISM to Emulated-ISM (Mete Durlu) [RHEL-73484]
  - net/smc: fix incorrect SMC-D link group matching logic (Mete Durlu) [RHEL-73484]
  - net/smc: fix invalid link access in dumping SMC-R connections (Mete Durlu) [RHEL-73484]
  - net/smc: manage system EID in SMC stack instead of ISM driver (Mete Durlu) [RHEL-73484]
  - net/smc: disable SEID on non-s390 archs where virtual ISM may be used (Mete Durlu) [RHEL-73484]
  - net/smc: support extended GID in SMC-D lgr netlink attribute (Mete Durlu) [RHEL-73484]
  - net/smc: compatible with 128-bits extended GID of virtual ISM device (Mete Durlu) [RHEL-73484]
  - net/smc: define a reserved CHID range for virtual ISM devices (Mete Durlu) [RHEL-73484]
  - net/smc: introduce virtual ISM device support feature (Mete Durlu) [RHEL-73484]
  - net/smc: support SMCv2.x supplemental features negotiation (Mete Durlu) [RHEL-73484]
  - net/smc: unify the structs of accept or confirm message for v1 and v2 (Mete Durlu) [RHEL-73484]
  - net/smc: introduce sub-functions for smc_clc_send_confirm_accept() (Mete Durlu) [RHEL-73484]
  - net/smc: rename some 'fce' to 'fce_v2x' for clarity (Mete Durlu) [RHEL-73484]
  - net/smc: fix missing byte order conversion in CLC handshake (Mete Durlu) [RHEL-73484]
  - net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty (Mete Durlu) [RHEL-73484]
  - net/smc: add sysctl for max conns per lgr for SMC-R v2.1 (Mete Durlu) [RHEL-73484]
  - net/smc: add sysctl for max links per lgr for SMC-R v2.1 (Mete Durlu) [RHEL-73484]
  - net/smc: put sk reference if close work was canceled (Mete Durlu) [RHEL-73484]
  - net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc (Mete Durlu) [RHEL-73484]
  - net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT (Mete Durlu) [RHEL-73484]
  - net/smc: return the right falback reason when prefix checks fail (Mete Durlu) [RHEL-73484]
  - net/smc: fix smc clc failed issue when netdevice not in init_net (Mete Durlu) [RHEL-73484]
  - net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add (Mete Durlu) [RHEL-73484]
  - net/smc: bugfix for smcr v2 server connect success statistic (Mete Durlu) [RHEL-73484]
  - net/smc: Extend SMCR v2 linkgroup netlink attribute (Mete Durlu) [RHEL-73484]
  - net/smc: support max links per lgr negotiation in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: support max connections per lgr negotiation (Mete Durlu) [RHEL-73484]
  - net/smc: support smc v2.x features validate (Mete Durlu) [RHEL-73484]
  - net/smc: add vendor unique experimental options area in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: support smc release version negotiation in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT (Mete Durlu) [RHEL-73484]
  - net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK (Mete Durlu) [RHEL-73484]
  - net/smc: Scan from current RMB list when no position specified (Mete Durlu) [RHEL-73484]
  - net/smc: Reset connection when trying to use SMCRv2 fails. (Mete Durlu) [RHEL-73484]
  - smc: Fix use-after-free in tcp_write_timer_handler(). (Mete Durlu) [RHEL-73484]
  - smc: preserve const qualifier in smc_sk() (Mete Durlu) [RHEL-73484]
  - net/smc: Use percpu ref for wr tx reference (Mete Durlu) [RHEL-73484]
  - net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() (Mete Durlu) [RHEL-73484]
  - vlan: enforce underlying device type (Guillaume Nault) [RHEL-87883] {CVE-2025-21920}
  - dm: fix copying after src array boundaries (Benjamin Marzinski) [RHEL-92761]
  - dm: add missing unlock on in dm_keyslot_evict() (Benjamin Marzinski) [RHEL-92761]
  - dm: always update the array size in realloc_argv on success (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: fix a warning on invalid table line (Benjamin Marzinski) [RHEL-92761]
  - dm-bufio: don't schedule in atomic context (Benjamin Marzinski) [RHEL-92761]
  - dm-ebs: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92761]
  - dm-verity: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: fix non-constant-time tag verification (Benjamin Marzinski) [RHEL-92761]
  - dm cache: support shrinking the origin device (Benjamin Marzinski) [RHEL-56106]
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Benjamin Marzinski) [RHEL-56106]
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: set ti->error on memory allocation failure (Benjamin Marzinski) [RHEL-92761]
  - NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew) [RHEL-83435]
  - MAINTAINERS: Update maintainers for crypto/marvell (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - suppress auth failure screaming due to negative tests (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Remove unused otx2_cpt_print_uc_dbg_info (Vladis Dronov) [RHEL-74335]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-74335]
  - crypto: marvell - replace deprecated PCI functions (Vladis Dronov) [RHEL-74335]
  - PCI: Make pcim_request_all_regions() a public function (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx* - Select CRYPTO_AUTHENC [partial] (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - select CONFIG_NET_DEVLINK (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Fix authenc setkey (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Remove custom swap functions in favor of built-in sort swap (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - update CPT inbound inline IPsec mailbox (Vladis Dronov) [RHEL-74335]
  - selftests: net: fdb_notify: Add a test for FDB notifications (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Add kill_process (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move checks from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move tests_run from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move logging from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: include lib/sh/*.sh with lib.sh (Ivan Vecera) [RHEL-78780]
  - selftests: mptcp: include net_helper.sh file (Ivan Vecera) [RHEL-78780]
  - selftests: mptcp: include lib.sh file (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: lib: Allow passing PID to stop_traffic() (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: Add a fallback cleanup() (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Introduce deferred commands (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: Convert log_test() to recognize RET values (Ivan Vecera) [RHEL-78780]
  - ndo_fdb_del: Add a parameter to report whether notification was sent (Izabela Bakollari) [RHEL-78780]
  - ndo_fdb_add: Add a parameter to report whether notification was sent (Izabela Bakollari) [RHEL-78780]
  - bonding: assign random address if device address is same as bond (Hangbin Liu) [RHEL-93062]
  - ice: Fix deinitializing VF in error path (Petr Oros) [RHEL-87626] {CVE-2025-21883}
  - ice: add E830 HW VF mailbox message limit support (Petr Oros) [RHEL-87626]
  - perf test stat_all_pmu.sh: Correctly check 'perf stat' result (Michael Petlan) [RHEL-81954]
  - perf test: Extra verbosity and hypervisor skip for tpebs test (Michael Petlan) [RHEL-81954]
  - perf test: Tag parallel failing shell tests with "(exclusive)" (Michael Petlan) [RHEL-81954]
  - perf test: Ignore security failures in all PMU test (Michael Petlan) [RHEL-81954]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-592.el9]
changelog:
  - drm: remove driver date from struct drm_driver and all drivers (Robert Foss) [RHEL-75950]
  - overflow: Introduce overflows_type() and castable_to_type() (Robert Foss) [RHEL-75950]
  - ASoC: hdmi-codec: move no_capture_mute to struct hdmi_codec_pdata (Robert Foss) [RHEL-75950]
  - ASoC: hdmi-codec: pass data to get_dai_id too (Robert Foss) [RHEL-75950]
  - kfifo: fix typos in kernel-doc (Robert Foss) [RHEL-75950]
  - kfifo: add kfifo_dma_out_prepare_mapped() (Robert Foss) [RHEL-75950]
  - kfifo: pass offset to setup_sgl_buf() instead of a pointer (Robert Foss) [RHEL-75950]
  - kfifo: rename l to len_to_end in setup_sgl() (Robert Foss) [RHEL-75950]
  - kfifo: remove support for physically non-contiguous memory (Robert Foss) [RHEL-75950]
  - kfifo: add kfifo_out_linear{,_ptr}() (Robert Foss) [RHEL-75950]
  - kfifo: introduce and use kfifo_skip_count() (Robert Foss) [RHEL-75950]
  - kfifo: drop __kfifo_dma_out_finish_r() (Robert Foss) [RHEL-75950]
  - arm64/efistub: Clean up KASLR logic (Lenny Szubowicz) [RHEL-33066]
  - efi/libstub: Cast away type warning in use of max() (Lenny Szubowicz) [RHEL-33066]
  - efi/libstub: fix efi_random_alloc() to allocate memory at alloc_min or higher address (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Remap kernel text read-only before dropping NX attribute (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-33066]
  - libstub: Fix compilation warning for rv32 (Lenny Szubowicz) [RHEL-33066]
  - arm64: libstub: Move KASLR handling functions to kaslr.c (Lenny Szubowicz) [RHEL-33066]
  - crypto: tegra - Fix IV usage for AES ECB (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix format specifier in (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Use HMAC fallback when keyslots are full (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Reserve keyslots to allocate dynamically (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Set IV to NULL explicitly for AES ECB (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix CMAC intermediate result handling (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix HASH intermediate result handling (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Transfer HASH init function to crypto engine (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - check return value for hash do_one_req (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - finalize crypto req on error (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Do not use fixed size buffers (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Use separate buffer for setkey (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - remove unneeded crypto_engine_stop() call (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - remove redundant error check on ret (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: engine - Remove prepare/unprepare request (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: iaa - Do not clobber req->base.data (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Move compression CRC into request object (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Test the correct request flag (Vladis Dronov) [RHEL-87768]
  - MAINTAINERS: Add Vinicius Gomes to MAINTAINERS for IAA Crypto (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (Vladis Dronov) [RHEL-87768]
  - scsi: target: iscsi: Fix timeout on deleted connection (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: tcm_loop: Fix wrong abort tag (Maurizio Lombardi) [RHEL-93481]
  - scsi: tcm_loop: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: Replace deprecated strncpy() with strscpy() (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: iscsi: Fix typos (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: spc: Fix RSOC parameter data header size (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: core: Add line break to status show (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: tcmu: Constify some structures (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: Fix incorrect function name in pscsi_create_type_disk() (Maurizio Lombardi) [RHEL-93481]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-593.el9]
changelog:
  - selftests/mm: virtual_address_range: avoid reading from VM_IO mappings (Li Wang) [RHEL-88165]
  - selftests/mm: vm_util: split up /proc/self/smaps parsing (Li Wang) [RHEL-88165]
  - mm: selftest to verify zero-filled pages are mapped to zeropage (Li Wang) [RHEL-88165]
  - selftests/mm: virtual_address_range: unmap chunks after validation (Li Wang) [RHEL-88165]
  - selftests/mm: virtual_address_range: mmap() without PROT_WRITE (Li Wang) [RHEL-88165]
  - selftest/mm: fix typo in virtual_address_range (Li Wang) [RHEL-88165]
  - selftests: add ksft_exit_fail_perror() (Li Wang) [RHEL-88165]
  - thermal: intel: int340x: Fix Panther Lake DLVR support (David Arcari) [RHEL-88234]
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids (Steve Dunnagan) [RHEL-89787]
  - cxl/core/regs: Refactor out functions to count regblocks of given type (John W. Linville) [RHEL-88727]
  - cxl/test: Update test code for event records to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update Memory Module Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update DRAM Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update General Media Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Add Component Identifier formatting for CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update Common Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/pci: Add CXL Type 1/2 support to cxl_dvsec_rr_decode() (John W. Linville) [RHEL-88727]
  - cxl/region: Fix region creation for greater than x2 switches (John W. Linville) [RHEL-88727]
  - cxl/pci: Check dport->regs.rcd_pcie_cap availability before accessing (John W. Linville) [RHEL-88727]
  - cxl/pci: Fix potential bogus return value upon successful probing (John W. Linville) [RHEL-88727]
  - cxl/region: Refactor common create region code (John W. Linville) [RHEL-88727]
  - cxl/hdm: Use guard() in cxl_dpa_set_mode() (John W. Linville) [RHEL-88727]
  - cxl/pci: Delay event buffer allocation (John W. Linville) [RHEL-88727]
  - cxl/cdat: Use %pra for dpa range outputs (John W. Linville) [RHEL-88727]
  - cxl: downgrade a warning message to debug level in cxl_probe_component_regs() (John W. Linville) [RHEL-88727]
  - cxl/pci: Add sysfs attribute for CXL 1.1 device link status (John W. Linville) [RHEL-88727]
  - cxl/core/regs: Add rcd_pcie_cap initialization (John W. Linville) [RHEL-88727]
  - cxl/test: Improve init-order fidelity relative to real-world systems (John W. Linville) [RHEL-88727]
  - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return (John W. Linville) [RHEL-88727]
  - cxl/port: Fix CXL port initialization order when the subsystem is built-in (John W. Linville) [RHEL-88727]
  - cxl: Fix comment regarding cxl_query_cmd() return data (John W. Linville) [RHEL-88727]
  - cxl: Convert cxl_internal_send_cmd() to use 'struct cxl_mailbox' as input (John W. Linville) [RHEL-88727]
  - cxl: Move mailbox related bits to the same context (John W. Linville) [RHEL-88727]
  - cxl: move cxl headers to new include/cxl/ directory (John W. Linville) [RHEL-88727]
  - cxl/region: Remove lock from memory notifier callback (John W. Linville) [RHEL-88727]
  - cxl/pci: simplify the check of mem_enabled in cxl_hdm_decode_init() (John W. Linville) [RHEL-88727]
  - cxl/pci: Check Mem_info_valid bit for each applicable DVSEC (John W. Linville) [RHEL-88727]
  - cxl/pci: Remove duplicated implementation of waiting for memory_info_valid (John W. Linville) [RHEL-88727]
  - cxl/pci: Remove duplicate host_bridge->native_aer checking (John W. Linville) [RHEL-88727]
  - cxl/pci: cxl_dport_map_rch_aer() cleanup (John W. Linville) [RHEL-88727]
  - cxl/pci: Rename cxl_setup_parent_dport() and cxl_dport_map_regs() (John W. Linville) [RHEL-88727]
  - cxl/port: Refactor __devm_cxl_add_port() to drop goto pattern (John W. Linville) [RHEL-88727]
  - cxl/port: Use scoped_guard()/guard() to drop device_lock() for cxl_port (John W. Linville) [RHEL-88727]
  - cxl/port: Use __free() to drop put_device() for cxl_port (John W. Linville) [RHEL-88727]
  - cxl: Remove duplicate included header file core.h (John W. Linville) [RHEL-88727]
  - tools/testing/cxl: Use dev_is_platform() (John W. Linville) [RHEL-88727]
  - cxl/port: Convert to use ERR_CAST() (John W. Linville) [RHEL-88727]
  - cxl/core/pci: Move reading of control register to immediately before usage (John W. Linville) [RHEL-88727]
  - cxl: Remove defunct code calculating host bridge target positions (John W. Linville) [RHEL-88727]
  - cxl/core: Fold cxl_trace_hpa() into cxl_dpa_to_hpa() (John W. Linville) [RHEL-88727]
  - cxl/test: Replace ENXIO with EBUSY for inject poison limit reached (John W. Linville) [RHEL-88727]
  - cxl/memdev: Replace ENXIO with EBUSY for inject poison limit reached (John W. Linville) [RHEL-88727]
  - cxl/acpi: Warn on mixed CXL VH and RCH/RCD Hierarchy (John W. Linville) [RHEL-88727]
  - cxl/region: Simplify cxl_region_nid() (John W. Linville) [RHEL-88727]
  - cxl/region: Support to calculate memory tier abstract distance (John W. Linville) [RHEL-88727]
  - cxl: add missing MODULE_DESCRIPTION() macros (John W. Linville) [RHEL-88727]
  - cxl/events: Use a common struct for DRAM and General Media events (John W. Linville) [RHEL-88727]
  - unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-92670]
  - debugfs: Fix the missing initializations in __debugfs_file_get() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - saner replacement for debugfs_rename() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: take debugfs_short_fops definition out of ifdef (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: allow to store an additional opaque pointer at file creation (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: don't mess with bits in ->d_fsdata (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: get rid of dynamically allocation proxy_ops (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: move ->automount into debugfs_inode_info (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: separate cache for debugfs inodes (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: drop inline constant formatting for ERR_PTR(-ERROR) (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: update comment of debugfs_rename() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - OPP: fix error checking in opp_migrate_dentry() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: fix oops during rmmod (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: use IS_ERR instead of NULL check in bond_create_debugfs (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: remove redundant NULL check in debugfs function (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: fix error checking in bond_debug_reregister() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - iommu/amd: Enable support for up to 2K interrupts per function (Eder Zulian) [RHEL-22785]
  - iommu/amd: Rename DTE_INTTABLEN* and MAX_IRQS_PER_TABLE macro (Eder Zulian) [RHEL-22785]
  - iommu/amd: Replace slab cache allocator with page allocator (Eder Zulian) [RHEL-22785]
  - iommu/amd: Introduce generic function to set multibit feature value (Eder Zulian) [RHEL-22785]
  - qed: remove cast to pointers passed to kfree (John Meneghini) [RHEL-72637]
  - net: qed: make 'qed_ll2_ops_pass' as __maybe_unused (John Meneghini) [RHEL-72637]
  - net: qed: fix typos (John Meneghini) [RHEL-72637]
  - scsi: Constify struct pci_device_id (John Meneghini) [RHEL-72637]
  - qed: fix possible uninit pointer read in qed_mcp_nvm_info_populate() (John Meneghini) [RHEL-72637]
  - net/qed: allow old cards not supporting "num_images" to work (John Meneghini) [RHEL-72637]
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (John Meneghini) [RHEL-72637]
  - scsi: qedf: Remove dead code (John Meneghini) [RHEL-72637]
  - net: qlogic: use ethtool string helpers (John Meneghini) [RHEL-72637]
  - scsi: qedf: Remove trailing space after \n newline (John Meneghini) [RHEL-72637]
  - scsi: qedf: Call scsi_done() directly (John Meneghini) [RHEL-72637]
  - scsi: qedf: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (John Meneghini) [RHEL-72637]
  - message deprecated state in ahci_xgene, ahci_seattle and hisi_sas_main (Tomas Henzl) [RHEL-95986]
  - s390/cpumf: Update CPU Measurement facility extended counter set support (Mete Durlu) [RHEL-90738]
  - selftests/mm: restore default nr_hugepages value during cleanup in hugetlb_reparenting_test.sh (Li Wang) [RHEL-86180]
  - selftest/mm: make hugetlb_reparenting_test tolerant to async reparenting (Li Wang) [RHEL-86180]
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Li Wang) [RHEL-86180]
  - perf: arm_cspmu: nvidia: monitor all ports by default (Michael Petlan) [RHEL-89488]
  - perf: arm_cspmu: nvidia: enable NVLINK-C2C port filtering (Michael Petlan) [RHEL-89488]
  - perf: arm_cspmu: nvidia: fix sysfs path in the kernel doc (Michael Petlan) [RHEL-89488]
  - perf: arm_cspmu: nvidia: remove unsupported SCF events (Michael Petlan) [RHEL-89488]
  - lazy tlb: fix hotplug exit race with MMU_LAZY_TLB_SHOOTDOWN (Herton R. Krzesinski) [RHEL-82922]
  - dim: pass dim_sample to net_dim() by reference (Ivan Vecera) [RHEL-94962]
  - dim: make dim_calc_stats() inputs const pointers (Ivan Vecera) [RHEL-94962]
  - linux/dim: Do nothing if no time delta between samples (Ivan Vecera) [RHEL-94962]
  - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Mamatha Inamdar) [RHEL-94838]
  - octeon_ep_vf: Resolve netdevice usage count issue (Kamal Heib) [RHEL-83999]
  - rtla: Define _GNU_SOURCE in timerlat_bpf.c (Tomas Glozar) [RHEL-88653]
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CKI Backport Bot) [RHEL-83195] {CVE-2025-21848}
  - scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer (Ewan D. Milne) [RHEL-94042]
  - scsi: Improve CDL control (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Clear flags for scsi_cmnd that did not complete (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_transport_srp: Replace min/max nesting with clamp() (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Tighten the page format heuristics with MODE SELECT (Ewan D. Milne) [RHEL-94042]
  - scsi: st: ERASE does not change tape location (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Fix array overflow in st_setup() (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Use a switch statement when attaching VPD pages (Ewan D. Milne) [RHEL-94042]
  - scsi: logging: Fix scsi_logging_level bounds (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_error: Add comments to scsi_check_sense() (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Fix uninitialized variable use (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Fix missing lock protection (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Do not sleep in atomic sections (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Simplify command handling (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Remove a reference to in_use_bm (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Remove sdebug_device_access_info (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add support for partitioning the tape (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Reset tape setting at device reset (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add compression mode page for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add read support and update locate for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add write support with block lengths and 4 bytes of data (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add READ BLOCK LIMITS and modify LOAD for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: First fixes for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Add sysfs file position_lost_in_reset (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Modify st.c to use the new scsi_error counters (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Restore some drive settings after reset (Ewan D. Milne) [RHEL-94042]
  - scsi: sg: Enable runtime power management (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Fix input/output error on empty drive reset (Ewan D. Milne) [RHEL-94042]
  - scsi: mpi3mr: Fix ATA NCQ priority support (Ewan D. Milne) [RHEL-94042]
  - scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume() (Ewan D. Milne) [RHEL-94042]
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Luis Claudio R. Goncalves) [RHEL-79183]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-594.el9]
changelog:
  - tools: ynl: add all headers to makefile deps (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - selftests: drv-net: add missing trailing backslash (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement cap validation in the core (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net: shaper: implement introspection support (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - netlink: spec: add shaper introspection support (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement shaper cleanup on queue deletion (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement delete support for NODE scope shaper (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement NL group operation (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement NL set and delete operations (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement NL get operation (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - netlink: spec: add shaper YAML spec (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - testing: net-drv: add basic shaper test (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - genetlink: extend info user-storage to match NL cb ctx (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - smb: client: fix UAF in decryption with multichannel (CKI Backport Bot) [RHEL-94457] {CVE-2025-37750}
  - RDMA/irdma: Remove deliver net device event (Kamal Heib) [RHEL-87576]
  - RDMA/irdma: Remove unused irdma_cqp_*_fpm_val_cmd functions (Kamal Heib) [RHEL-87576]
  - RDMA/irdma: Fix misspelling of "accept*" (Kamal Heib) [RHEL-87576]
  - RDMA/irdma: fix error message in irdma_modify_qp_roce() (Kamal Heib) [RHEL-87576]
  - x86/tsc: Use topology_max_packages() to get package number (David Arcari) [RHEL-92573]
  - perf/x86/intel/uncore: Add Clearwater Forest support (Michael Petlan) [RHEL-45095]
  - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-94247] {CVE-2025-37738}
  - net: rename netns_local to netns_immutable (Ivan Vecera) [RHEL-91110]
  - ynl: devlink: add missing board-serial-number (Petr Oros) [RHEL-75600]
  - devlink: fix xa_alloc_cyclic() error handling (Petr Oros) [RHEL-75600]
  - devlink: add devl guard (Petr Oros) [RHEL-75600]
  - pldmfw: enable selected component update (Petr Oros) [RHEL-75600]
  - devlink: Improve the port attributes description (Petr Oros) [RHEL-75600]
  - devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-75600]
  - devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-75600]
  - devlink: remove unused devlink_resource_register() (Petr Oros) [RHEL-75600]
  - devlink: remove unused devlink_resource_occ_get_register() and _unregister() (Petr Oros) [RHEL-75600]
  - devlink: region: snapshot IDs: consolidate error values (Petr Oros) [RHEL-75600]
  - devlink: devl_resource_register(): differentiate error codes (Petr Oros) [RHEL-75600]
  - devlink: use devlink_nl_put_u64() helper (Petr Oros) [RHEL-75600]
  - devlink: introduce devlink_nl_put_u64() (Petr Oros) [RHEL-75600]
  - tools: ynl-gen: use names of constants in generated limits (Petr Oros) [RHEL-75600]
  - tools: ynl-gen: refactor check validation for TypeBinary (Petr Oros) [RHEL-75600]
  - scsi: bnx2fc: Use kthread_create_on_cpu() (John Meneghini) [RHEL-94578]
  - net: bnx2x: use ethtool string helpers (John Meneghini) [RHEL-94578]
  - scsi: libfcoe: Include <linux/prandom.h> instead of <linux/random.h> (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Remove some unused fields in struct bnx2fc_rport (John Meneghini) [RHEL-94578]
  - net: cnic: Convert tasklet API to new bottom half workqueue mechanism (John Meneghini) [RHEL-94578]
  - scsi: libfc: Add some kernel-doc comments (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Remove redundant assignment to variable 'i' (John Meneghini) [RHEL-94578]
  - scsi: libfc: replace deprecated strncpy() with memcpy() (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Make fcoe_bus_type const (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Fix unsigned comparison with zero in store_ctlr_mode() (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Use sysfs_match_string() over fcoe_parse_mode() (John Meneghini) [RHEL-94578]
  - scsi: libfc: Map FC_TIMED_OUT to DID_TIME_OUT (John Meneghini) [RHEL-94578]
  - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (John Meneghini) [RHEL-94578]
  - scsi: libfc: Don't schedule abort twice (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Replace deprecated strncpy() with strscpy() (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Do not rely on a SCSI command for LUN or target reset (John Meneghini) [RHEL-94578]
  - scsi: libfcoe: Replace all non-returning strlcpy() with strscpy() (John Meneghini) [RHEL-94578]
  - bnx2: remove deadcode in bnx2_init_cpus() (John Meneghini) [RHEL-94578]
  - scsi: libfc: Include the correct header (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Fix possible name leak when device_register() fails (John Meneghini) [RHEL-94578]
  - scsi: libfc: Remove redundant variable ev_qual (John Meneghini) [RHEL-94578]
  - bnx2: Use kmalloc_size_roundup() to match ksize() usage (John Meneghini) [RHEL-94578]
  - bnx2: Fix spelling mistake "bufferred" -> "buffered" (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Remove redundant assignment to variable 'wlen' (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Use per-CPU API to update per-CPU statistics (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Add a local_lock to fcoe_percpu (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Simplify if-if to if-else (John Meneghini) [RHEL-94578]
  - scsi: libfc: Replace one-element arrays with flexible-array members (John Meneghini) [RHEL-93390]
  - scsi: bnx2fc: Stop using the SCSI pointer (John Meneghini) [RHEL-94578]
  - scsi: libfc: Stop using the SCSI pointer (John Meneghini) [RHEL-94578]
  - bnx2: Fix an error message (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Use netif_is_bond_master() instead of open code (John Meneghini) [RHEL-94578]
  - scsi: libfc: Call scsi_done() directly (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Call scsi_done() directly (John Meneghini) [RHEL-94578]
  - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-93631] {CVE-2025-23150}
  - net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-93830]
  - ibmveth: Always stop tx queues during close (Mamatha Inamdar) [RHEL-93830]
  - perf/x86/rapl: Add support for Intel Arrow Lake U (Michael Petlan) [RHEL-53585]
  - perf/x86/intel: Add PMU support for ArrowLake-H (Michael Petlan) [RHEL-20094]
  - perf/x86/intel: Support hybrid PMU with multiple atom uarchs (Michael Petlan) [RHEL-20094]
  - x86/cpu/intel: Define helper to get CPU core native ID (Michael Petlan) [RHEL-20094]
  - perf/x86: Refine hybrid_pmu_type defination (Michael Petlan) [RHEL-20094]
  - fs/file.c: add fast path in find_next_fd() (Ian Kent) [RHEL-38570]
  - fs/file.c: conditionally clear full_fds (Ian Kent) [RHEL-38570]
  - fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd() (Ian Kent) [RHEL-38570]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-595.el9]
changelog:
  - Squashfs: fix handling and sanity checking of xattr_ids count (CKI Backport Bot) [RHEL-93466] {CVE-2023-52933}
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-83573]
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-83573]
  - i40e: use generic unrolled_count() macro (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_dcb_hw_get_num_tc (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_asq_send_command_v2 (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_commit_partition_bw_setting (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_del_filter (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_get_cur_guaranteed_fd_count (Dennis Chen) [RHEL-83573]
  - i40e: Deadcode profile code (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_(read|write)_phy_register (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_blink_phy_link_led (Dennis Chen) [RHEL-83573]
  - i40e: Deadcode i40e_aq_* (Dennis Chen) [RHEL-83573]
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Jeff Moyer) [RHEL-75893] {CVE-2024-56662}
  - io_uring/sqpoll: zero sqd->thread on tctx errors (Jeff Moyer) [RHEL-74645] {CVE-2025-21633}
  - i2c: tegra: check msg length in SMBUS block read (Steve Dunnagan) [RHEL-89167]
  - x86/CPU/AMD: Print the reason for the last reset (David Arcari) [RHEL-89441]
  - Documentation: Add AMD Zen debugging document (David Arcari) [RHEL-89441]
  - platform/x86/amd/pmc: Use FCH_PM_BASE definition (David Arcari) [RHEL-89441]
  - i2c: piix4, x86/platform: Move the SB800 PIIX4 FCH definitions to <asm/amd/fch.h> (David Arcari) [RHEL-89441]
  - i2c: piix4: Make CONFIG_I2C_PIIX4 dependent on CONFIG_X86 (David Arcari) [RHEL-89441]
  - i2c: piix4: Export i2c_piix4 driver functions as library (David Arcari) [RHEL-89441]
  - i2c: piix4: Move i2c_piix4 macros and structures to common header (David Arcari) [RHEL-89441]
  - i2c: piix4: Change the parameter list of piix4_transaction function (David Arcari) [RHEL-89441]
  - i2c: don't use ',' after delimiters [partial] (David Arcari) [RHEL-89441]
  - i2c: piix4: Register SPDs (David Arcari) [RHEL-89441]
  - i2c: piix4: reword according to newest specification (David Arcari) [RHEL-89441]
  - i2c: piix4: Fix adapter not be removed in piix4_remove() (David Arcari) [RHEL-89441]
  - net: geneve: Leverage core stats allocator (Paolo Abeni) [RHEL-93467]
  - redhat/configs: remove automotive directory (Eric Chanudet) [RHEL-96355]
  - net: hsr: fix fill_frame_info() regression vs VLAN packets (Felix Maurer) [RHEL-84580]
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Felix Maurer) [RHEL-84580]
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Felix Maurer) [RHEL-84580]
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CKI Backport Bot) [RHEL-82650] {CVE-2024-58083}
  - bus: mhi: host: Fix race between unprepare and queue_buf (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: pci_generic: Add support for SA8775P endpoint (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Remove unused functions (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Avoid possible uninitialized fw_load_type (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Add a policy to enable image transfer via BHIe in PBL (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Refactor BHI/BHIe based firmware loading (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: pci_generic: fix MHI BAR mapping (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: pci_generic: Use pcim_iomap_region() to request and map MHI BAR (Mattijs Korpershoek) [RHEL-93889]
  - docs: ABI: sysfs-bus-mhi: Update contact info (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Update device ID for SA8775P (Mattijs Korpershoek) [RHEL-93889]
  - PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio' (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Fix the DMA data direction of dma_unmap_single() (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Enable MHI async read/write support (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Add support for DMA async read/write operation (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Simulate async read/write using iATU (Mattijs Korpershoek) [RHEL-93889]
  - md/raid1: Add check for missing source disk in process_checks() (Nigel Croxon) [RHEL-96672]
  - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Thomas Huth) [RHEL-86670]
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (Thomas Huth) [RHEL-85183]
  - KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (Thomas Huth) [RHEL-85183]
  - KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (Thomas Huth) [RHEL-85183]
  - KVM: s390: vsie: fix virtual/physical address in unpin_scb() (Thomas Huth) [RHEL-85183]
  - KVM: s390: Increase size of union sca_utility to four bytes (Thomas Huth) [RHEL-85183]
  - KVM: s390: Remove one byte cmpxchg() usage (Thomas Huth) [RHEL-85183]
  - KVM: s390: Use try_cmpxchg() instead of cmpxchg() loops (Thomas Huth) [RHEL-85183]
  - s390/mm/gmap: Fix __gmap_fault() return code (Thomas Huth) [RHEL-85183]
  - s390/mm/gmap: Refactor gmap_fault() and add support for pfault (Thomas Huth) [RHEL-85183]
  - s390/kvm: Remove kvm_arch_fault_in_page() (Thomas Huth) [RHEL-85183]
  - KVM: s390: Use kvm_release_page_dirty() to unpin "struct page" memory (Thomas Huth) [RHEL-85183]
  - s390/kvm: Move bitfields for dat tables (Thomas Huth) [RHEL-85183]
  - s390/entry: Pass the asce as parameter to sie64a() (Thomas Huth) [RHEL-85183]
  - kvm: s390: Reject memory region operations for ucontrol VMs (Thomas Huth) [RHEL-85183]
  - KVM: s390: vsie: retry SIE instruction on host intercepts (Thomas Huth) [RHEL-85183]
  - KVM: s390: Don't re-setup dummy routing when KVM_CREATE_IRQCHIP (Thomas Huth) [RHEL-85183]
  - procfs: fix a locking bug in a vmcore_add_device_dump() error path (Thomas Huth) [RHEL-72974]
  - redhat: Enable CONFIG_VIRTIO_MEM on s390x (Thomas Huth) [RHEL-72974]
  - s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (Thomas Huth) [RHEL-72974]
  - virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (Thomas Huth) [RHEL-72974]
  - virtio-mem: remember usable region size (Thomas Huth) [RHEL-72974]
  - virtio-mem: mark device ready before registering callbacks in kdump mode (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM ranges in 2nd kernel (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: factor out freeing a list of vmcore ranges (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: factor out allocating a vmcore range and adding it to a list (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: move vmcore definitions out of kcore.h (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: prefix all pr_* with "vmcore:" (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: disallow vmcore modifications while the vmcore is open (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (Thomas Huth) [RHEL-72974]
  - s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (Thomas Huth) [RHEL-72974]
  - s390/sparsemem: Reduce section size to 128 MiB (Thomas Huth) [RHEL-72974]
  - lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (Thomas Huth) [RHEL-72974]
  - virtio-mem: s390 support (Thomas Huth) [RHEL-72974]
  - s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM memory devices (Thomas Huth) [RHEL-72974]
  - Documentation: s390-diag.rst: Document diag500(STORAGE LIMIT) subfunction (Thomas Huth) [RHEL-72974]
  - Documentation: s390-diag.rst: Make diag500 a generic KVM hypercall (Thomas Huth) [RHEL-72974]
  - s390/boot: Replace S390_lowcore by get_lowcore() (Thomas Huth) [RHEL-72974]
  - s390: Add get_lowcore() function (Thomas Huth) [RHEL-72974]
  - s390: Sort mcount locations at build time (Thomas Huth) [RHEL-86670]
  - s390/build: Avoid relocation information in final vmlinux (Thomas Huth) [RHEL-86670]
  - s390/boot: Fix KASLR base offset off by __START_KERNEL bytes (Thomas Huth) [RHEL-86670]
  - s390/mm: Allow large pages for KASAN shadow mapping (Thomas Huth) [RHEL-86670]
  - s390/boot: Avoid possible physmem_info segment corruption (Thomas Huth) [RHEL-86670] {CVE-2024-45014}
  - s390: Fix linker error when -no-pie option is unavailable (Thomas Huth) [RHEL-86670]
  - s390: Always enable EXPOLINE_EXTERN if supported (Thomas Huth) [RHEL-86670]
  - s390/mm: Fix DirectMap accounting (Thomas Huth) [RHEL-86670]
  - s390/mm/ptdump: Fix handling of identity mapping area (Thomas Huth) [RHEL-86670]
  - s390/setup: Fix __pa/__va for modules under non-GPL licenses (Thomas Huth) [RHEL-86670]
  - pgtable: fix s390 ptdesc field comments (Thomas Huth) [RHEL-86670]
  - s390/kfence: Split kfence pool into 4k mappings in arch_kfence_init_pool() (Thomas Huth) [RHEL-86670]
  - s390: mm: accelerate pagefault when badaccess (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: move VM_FAULT_ERROR handling to do_exception() (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: remove VM_FAULT_BADMAP and VM_FAULT_BADACCESS (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: remove VM_FAULT_SIGNAL (Thomas Huth) [RHEL-86670]
  - s390/mm: remove __GFP_HIGHMEM masking (Thomas Huth) [RHEL-86670]
  - s390/dasd: Fix invalid dereferencing of indirect CCW data pointer (Thomas Huth) [RHEL-86670]
  - s390/vfio_ccw: Fix target addresses of TIC CCWs (Thomas Huth) [RHEL-86670]
  - s390: Update defconfigs (Thomas Huth) [RHEL-86670]
  - s390: remove native mmap2() syscall (Thomas Huth) [RHEL-86670]
  - s390/boot: Do not adjust GOT entries for undef weak sym (Thomas Huth) [RHEL-86670]
  - s390/sclp: Fix sclp_init() cleanup on failure (Thomas Huth) [RHEL-86670]
  - s390/virtio_ccw: Fix config change notifications (Thomas Huth) [RHEL-86670]
  - s390/mm: Restore mapping of kernel image using large pages (Thomas Huth) [RHEL-86670]
  - s390/mm: Allow large pages only for aligned physical addresses (Thomas Huth) [RHEL-86670]
  - s390: Update defconfigs (Thomas Huth) [RHEL-86670]
  - s390/crash: Do not use VM info if os_info does not have it (Thomas Huth) [RHEL-86670]
  - s390/zcrypt: Use kvcalloc() instead of kvmalloc_array() (Thomas Huth) [RHEL-86670]
  - s390/kprobes: Remove custom insn slot allocator (Thomas Huth) [RHEL-86670]
  - s390/boot: Remove alt_stfle_fac_list from decompressor (Thomas Huth) [RHEL-86670]
  - s390/ap: Fix bind complete udev event sent after each AP bus scan (Thomas Huth) [RHEL-86670]
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Thomas Huth) [RHEL-86670]
  - s390/ipl: Introduce sysfs attribute 'scp_data' for dump ipl (Thomas Huth) [RHEL-86670]
  - s390/ipl: Introduce macros for (re)ipl sysfs attribute 'scp_data' (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix incorrect initialization of nvme dump block (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix incorrect initialization of len fields in nvme reipl block (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix never less than zero warning (Thomas Huth) [RHEL-86670]
  - s390/ipl: Do not accept z/VM CP diag X'008' cmds longer than max length (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix size of vmcmd buffers for sending z/VM CP diag X'008' cmds (Thomas Huth) [RHEL-86670]
  - s390/alternatives: Convert runtime sanity check into compile time check (Thomas Huth) [RHEL-86670]
  - s390/iucv: Unexport iucv_root (Thomas Huth) [RHEL-86670]
  - tty: hvc-iucv: Make use of iucv_alloc_device() (Thomas Huth) [RHEL-86670]
  - tty: hvc-iucv: fix function pointer casts (Thomas Huth) [RHEL-86670]
  - tty: hvc: convert to u8 and size_t (Thomas Huth) [RHEL-86670]
  - s390/vmlogrdr: Make use of iucv_alloc_device() (Thomas Huth) [RHEL-86670]
  - s390/irq: Set CIF_NOHZ_DELAY in do_io_irq() (Thomas Huth) [RHEL-86670]
  - s390: Mark psw in __load_psw_mask() as __unitialized (Thomas Huth) [RHEL-86670]
  - s390/vtime: Use get_cpu_timer() (Thomas Huth) [RHEL-86670]
  - s390/idle: Rewrite psw_idle() in C (Thomas Huth) [RHEL-86670]
  - s390/ftrace: Avoid calling unwinder in ftrace_return_address() (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Use break instead of return statement (Thomas Huth) [RHEL-86670]
  - s390/stackstrace: Detect vdso stack frames (Thomas Huth) [RHEL-86670]
  - s390/vdso: Introduce and use struct stack_frame_vdso_wrapper (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Improve detection of invalid instruction pointers (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Skip first user stack frame (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Merge perf_callchain_user() and arch_stack_walk_user() (Thomas Huth) [RHEL-86670]
  - s390/ftrace: Use unwinder instead of __builtin_return_address() (Thomas Huth) [RHEL-86670]
  - s390: add USER_STACKTRACE support (Thomas Huth) [RHEL-86670]
  - s390/perf: implement perf_callchain_user() (Thomas Huth) [RHEL-86670]
  - s390/fpu: Remove comment about TIF_FPU (Thomas Huth) [RHEL-86670]
  - s390/pci: Add missing virt_to_phys() for directed DIBV (Thomas Huth) [RHEL-86670]
  - s390/vdso: Use standard stack frame layout (Thomas Huth) [RHEL-86670]
  - s390/vdso: Generate unwind information for C modules (Thomas Huth) [RHEL-86670]
  - s390/pgtable: Add missing hardware bits for puds, pmds (Thomas Huth) [RHEL-86670]
  - s390: Compile kernel with -fPIC and link with -no-pie (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: Drop .hash and .gnu.hash for !CONFIG_PIE_BUILD (Thomas Huth) [RHEL-86670]
  - s390/os_info: Fix array size in struct os_info (Thomas Huth) [RHEL-86670]
  - s390/os_info: Initialize old os_info in standalone dump kernel (Thomas Huth) [RHEL-86670]
  - s390/vfio-ap: Driver feature advertisement (Thomas Huth) [RHEL-73321]
  - docs: Update s390 vfio-ap doc for ap_config sysfs attribute (Thomas Huth) [RHEL-73321]
  - s390/vfio-ap: Add write support to sysfs attr ap_config (Thomas Huth) [RHEL-73321]
  - s390/vfio-ap: Ignore duplicate link requests in vfio_ap_mdev_link_queue (Thomas Huth) [RHEL-73321]
  - s390/vfio-ap: Add sysfs attr, ap_config, to export mdev state (Thomas Huth) [RHEL-73321]
  - s390/ap: Externalize AP bus specific bitmap reading function (Thomas Huth) [RHEL-73321]
  - s390/ap: make ap_bus_type const (Thomas Huth) [RHEL-73321]
  - s390/expoline: Make modules use kernel expolines (Thomas Huth) [RHEL-86670]
  - s390/nospec: Correct modules thunk offset calculation (Thomas Huth) [RHEL-86670]
  - s390/boot: Do not rescue .vmlinux.relocs section (Thomas Huth) [RHEL-86670]
  - s390/boot: Rework deployment of the kernel image (Thomas Huth) [RHEL-86670]
  - redhat: Set the CONFIG_KERNEL_IMAGE_BASE option (Thomas Huth) [RHEL-86670]
  - s390: Map kernel at fixed location when KASLR is disabled (Thomas Huth) [RHEL-86670]
  - s390/mm: Uncouple physical vs virtual address spaces (Thomas Huth) [RHEL-86670]
  - s390/crash: Use old os_info to create PT_LOAD headers (Thomas Huth) [RHEL-86670]
  - s390/vmcoreinfo: Store virtual memory layout (Thomas Huth) [RHEL-86670]
  - s390/os_info: Store virtual memory layout (Thomas Huth) [RHEL-86670]
  - s390/os_info: Introduce value entries (Thomas Huth) [RHEL-86670]
  - s390/boot: Make .amode31 section address range explicit (Thomas Huth) [RHEL-86670]
  - s390/boot: Make identity mapping base address explicit (Thomas Huth) [RHEL-86670]
  - s390/boot: Uncouple virtual and physical kernel offsets (Thomas Huth) [RHEL-86670]
  - s390/mm: Create virtual memory layout structure (Thomas Huth) [RHEL-86670]
  - s390/mm: Move KASLR related to <asm/page.h> (Thomas Huth) [RHEL-86670]
  - s390/boot: Swap vmalloc and Lowcore/Real Memory Copy areas (Thomas Huth) [RHEL-86670]
  - s390/boot: Reduce size of identity mapping on overlap (Thomas Huth) [RHEL-86670]
  - s390/boot: Consider DCSS segments on memory layout setup (Thomas Huth) [RHEL-86670]
  - s390/boot: Do not force vmemmap to start at MAX_PHYSMEM_BITS (Thomas Huth) [RHEL-86670]
  - s390/irq,nmi: Include <asm/vtime.h> header directly (Thomas Huth) [RHEL-86670]
  - s390/cio: fix tracepoint subchannel type field (Thomas Huth) [RHEL-86670]
  - s390/mm: Convert gmap_make_secure to use a folio (Thomas Huth) [RHEL-86670]
  - s390/mm: Convert make_page_secure to use a folio (Thomas Huth) [RHEL-86670]
  - s390: adjust indentation of RELOCS command build step out (Thomas Huth) [RHEL-86670]
  - s390/cio: convert sprintf()/snprintf() to sysfs_emit() (Thomas Huth) [RHEL-86670]
  - redhat: Rename CONFIG_ZCRYPT_DEBUG to CONFIG_AP_DEBUG (Thomas Huth) [RHEL-86670]
  - s390/ap: rename ap debug configuration option (Thomas Huth) [RHEL-86670]
  - redhat: Enable new CONFIG_AP option (Thomas Huth) [RHEL-86670]
  - s390/ap: modularize ap bus (Thomas Huth) [RHEL-86670]
  - s390/chsc: use notifier for AP configuration changes (Thomas Huth) [RHEL-86670]
  - s390/ap: swap IRQ and bus/device registration (Thomas Huth) [RHEL-86670]
  - s390/ap: rework ap initialization (Thomas Huth) [RHEL-86670]
  - s390/ap: use static qci information (Thomas Huth) [RHEL-86670]
  - s390/cio: Ensure the copied buf is NUL terminated (Thomas Huth) [RHEL-86670]
  - s390/vdso: Add CFI for RA register to asm macro vdso_func (Thomas Huth) [RHEL-86670]
  - s390/3270: Fix buffer assignment (Thomas Huth) [RHEL-86670]
  - s390/mm: Fix clearing storage keys for huge pages (Thomas Huth) [RHEL-86670]
  - s390/mm: Fix NULL pointer dereference (Thomas Huth) [RHEL-86670]
  - s390/entry: align system call table on 8 bytes (Thomas Huth) [RHEL-86670]
  - s390/pai: fix sampling event removal for PMU device driver (Thomas Huth) [RHEL-86670]
  - s390/preempt: mark all functions __always_inline (Thomas Huth) [RHEL-86670]
  - s390/atomic: mark all functions __always_inline (Thomas Huth) [RHEL-86670]
  - s390/mm: fix NULL pointer dereference (Thomas Huth) [RHEL-86670]
  - s390/entry: compare gmap asce to determine guest/host fault (Thomas Huth) [RHEL-86670]
  - s390/entry: remove OUTSIDE macro (Thomas Huth) [RHEL-86670]
  - s390/entry: add CIF_SIE flag and remove sie64a() address check (Thomas Huth) [RHEL-86670]
  - s390/cio: use while (i--) pattern to clean up (Thomas Huth) [RHEL-86670]
  - s390/raw3270: improve raw3270_init() readability (Thomas Huth) [RHEL-86670]
  - s390/tape: make tape_class constant (Thomas Huth) [RHEL-86670]
  - s390/vmlogrdr: make vmlogrdr_class constant (Thomas Huth) [RHEL-86670]
  - s390/vmur: make vmur_class constant (Thomas Huth) [RHEL-86670]
  - s390/zcrypt: make zcrypt_class constant (Thomas Huth) [RHEL-86670]
  - s390/vfio-ap: make matrix_bus const (Thomas Huth) [RHEL-86670]
  - s390/mm: provide simple ARCH_HAS_DEBUG_VIRTUAL support (Thomas Huth) [RHEL-86670]
  - s390/vfio_ccw_cp: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/tape: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/3270: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/raw3270: fix indentation/whitespace errors (Thomas Huth) [RHEL-86670]
  - s390/3215: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - tty: con3215: convert to u8 and size_t (Thomas Huth) [RHEL-86670]
  - s390/vmur: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/scm: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/cio,idal: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/cio,idal: remove superfluous virt_to_phys() conversion (Thomas Huth) [RHEL-86670]
  - s390/cio,idal: code cleanup (Thomas Huth) [RHEL-86670]
  - s390/dasd: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/dasd: remove superfluous virt_to_phys() conversion (Thomas Huth) [RHEL-86670]
  - s390/virtio_ccw: avoid converting dma addresses / handles (Thomas Huth) [RHEL-86670]
  - s390/virtio_ccw: use DMA handle from DMA API (Thomas Huth) [RHEL-86670]
  - s390/sysinfo: allow response buffer in normal memory (Thomas Huth) [RHEL-86670]
  - s390/tools: handle rela R_390_GOTPCDBL/R_390_GOTOFF64 (Thomas Huth) [RHEL-86670]
  - s390/cache: prevent rebuild of shared_cpu_list (Thomas Huth) [RHEL-86670]
  - s390/configs: increase number of LOCKDEP_BITS (Thomas Huth) [RHEL-86670]
  - s390/pai: change sampling event assignment for PMU device driver (Thomas Huth) [RHEL-86670]
  - s390/dasd_eckd: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/dcssblk: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/boot: fix minor comment style damages (Thomas Huth) [RHEL-86670]
  - s390/boot: do not check for zero-termination relocation entry (Thomas Huth) [RHEL-86670]
  - s390/boot: make type of __vmlinux_relocs_64_start|end consistent (Thomas Huth) [RHEL-86670]
  - s390/boot: sanitize kaslr_adjust_relocs() function prototype (Thomas Huth) [RHEL-86670]
  - s390/boot: simplify GOT handling (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: fix .got.plt assertion (Thomas Huth) [RHEL-86670]
  - dcssblk: handle alloc_dax() -EOPNOTSUPP failure (Thomas Huth) [RHEL-86670]
  - s390/pgtable: define PFN_PTE_SHIFT (Thomas Huth) [RHEL-86670]
  - s390/boot: workaround current 'llvm-objdump -t -j ...' behavior (Thomas Huth) [RHEL-86670]
  - s390: enable MHP_MEMMAP_ON_MEMORY (Thomas Huth) [RHEL-86670]
  - s390/mm: implement MEM_PREPARE_ONLINE/MEM_FINISH_OFFLINE notifiers (Thomas Huth) [RHEL-86670]
  - s390/sclp: remove unhandled memory notifier type (Thomas Huth) [RHEL-86670]
  - s390/mm: allocate vmemmap pages from self-contained memory range (Thomas Huth) [RHEL-86670]
  - mm/memory_hotplug: introduce MEM_PREPARE_ONLINE/MEM_FINISH_OFFLINE notifiers (Thomas Huth) [RHEL-86670]
  - s390/vdso/data: Drop unnecessary header include (Thomas Huth) [RHEL-86670]
  - s390: compile relocatable kernel without -fPIE (Thomas Huth) [RHEL-86670]
  - s390: add relocs tool (Thomas Huth) [RHEL-86670]
  - s390/vdso64: filter out munaligned-symbols flag for vdso (Thomas Huth) [RHEL-86670]
  - s390/boot: add 'alloc' to info.bin .vmlinux.info section flags (Thomas Huth) [RHEL-86670]
  - s390/pci: Fix potential double remove of hotplug slot (Thomas Huth) [RHEL-86670]
  - s390/pci: remove hotplug slot when releasing the device (Thomas Huth) [RHEL-86670]
  - s390/pci: introduce lock to synchronize state of zpci_dev's (Thomas Huth) [RHEL-86670]
  - s390/pci: rename lock member in struct zpci_dev (Thomas Huth) [RHEL-86670]
  - s390/pai: adjust whitespace indentation (Thomas Huth) [RHEL-86670]
  - s390/pai: simplify event start function for perf stat (Thomas Huth) [RHEL-86670]
  - s390/pai: save PAI counter value page in event structure (Thomas Huth) [RHEL-86670]
  - s390/crc32le: convert to C (Thomas Huth) [RHEL-86670]
  - s390/crc32be: convert to C (Thomas Huth) [RHEL-86670]
  - s390/fpu: add vector instruction inline assemblies for crc32 (Thomas Huth) [RHEL-86670]
  - s390/sysinfo: convert bogomips calculation to C (Thomas Huth) [RHEL-86670]
  - s390/raid6: convert to use standard fpu_*() inline assemblies (Thomas Huth) [RHEL-86670]
  - s390/checksum: provide csum_partial_copy_nocheck() (Thomas Huth) [RHEL-86670]
  - s390/checksum: provide vector register variant of csum_partial() (Thomas Huth) [RHEL-86670]
  - s390/checksum: provide and use cksm() inline assembly (Thomas Huth) [RHEL-86670]
  - s390/checksum: call instrument_read() instead of kasan_check_read() (Thomas Huth) [RHEL-86670]
  - s390/nmi: remove register validation code (Thomas Huth) [RHEL-86670]
  - s390/setup: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390: don't allow CONFIG_COMPAT with LD=ld.lld (Thomas Huth) [RHEL-86670]
  - s390/vdso: remove unused ENTRY in linker scripts (Thomas Huth) [RHEL-86670]
  - s390/bug: remove entry size from __bug_table section (Thomas Huth) [RHEL-86670]
  - s390: link vmlinux with '-z notext' (Thomas Huth) [RHEL-86670]
  - s390: select CONFIG_ARCH_WANT_LD_ORPHAN_WARN (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle commonly discarded sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle ELF required sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle DWARF debug sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle '.rela' sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle '.init.text' (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: explicitly keep various sections (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: explicitly handle '.got' and '.plt' sections (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: handle '.data.rel' sections explicitly (Thomas Huth) [RHEL-86670]
  - s390/boot: add support for CONFIG_LD_ORPHAN_WARN (Thomas Huth) [RHEL-86670]
  - s390/dasd: fix double module refcount decrement (Thomas Huth) [RHEL-86670]
  - s390/dasd: Improve ERP error messages (Thomas Huth) [RHEL-86670]
  - s390/extmem: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/cio: make scm_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/cio: make ccw_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/cio: make css_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/ccwgroup: make ccwgroup_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/time: make stp_subsys const (Thomas Huth) [RHEL-86670]
  - s390/vdso: drop '-fPIC' from LDFLAGS (Thomas Huth) [RHEL-86670]
  - s390/cmf: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/cmf: remove unneeded DMA zone allocation (Thomas Huth) [RHEL-86670]
  - s390/cio: remove unneeded DMA zone allocation (Thomas Huth) [RHEL-86670]
  - s390/mmap: disable mmap alignment when randomize_va_space = 0 (Thomas Huth) [RHEL-86670]
  - s390/hypfs_sprp: remove unneeded DMA zone allocation (Thomas Huth) [RHEL-86670]
  - s390/diag: add missing virt_to_phys() translation to diag14() (Thomas Huth) [RHEL-86670]
  - s390/vmur: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/time: improve steering precision (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: return proper error code in paicrypt_init (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: emit error on too many counters (Thomas Huth) [RHEL-86670]
  - s390/hypfs_diag0c: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/hypfs_sprp: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/appldata: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/diag: fix diag26c() physical vs virtual address confusion (Thomas Huth) [RHEL-86670]
  - s390/configs: update default configurations (Thomas Huth) [RHEL-86670]
  - s390/configs: enable INIT_STACK_ALL_ZERO in all configurations (Thomas Huth) [RHEL-86670]
  - s390/configs: provide compat topic configuration target (Thomas Huth) [RHEL-86670]
  - s390/dasd: Use dev_*() for device log messages (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove PRINTK_HEADER and KMSG_COMPONENT definitions (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove %p format specifier from error messages (Thomas Huth) [RHEL-86670]
  - s390/dasd: Use dev_err() over printk() (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove unused message logging macros (Thomas Huth) [RHEL-86670]
  - s390/dasd: Move allocation error message to DBF (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove unnecessary errorstring generation (Thomas Huth) [RHEL-86670]
  - s390/dasd: Use sysfs_emit() over sprintf() (Thomas Huth) [RHEL-86670]
  - s390/dasd: Simplify uid string generation (Thomas Huth) [RHEL-86670]
  - s390/pai_ext: split function paiext_push_sample (Thomas Huth) [RHEL-86670]
  - s390/pai_ext: rework function paiext_copy argments (Thomas Huth) [RHEL-86670]
  - s390/pai: rework paiXXX_start and paiXXX_stop functions (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: split function paicrypt_push_sample (Thomas Huth) [RHEL-86670]
  - s390/pai: rework paixxxx_getctr interface (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: remove not needed tsk variable (Thomas Huth) [RHEL-86670]
  - s390/pci: fix max size calculation in zpci_memcpy_toio() (Thomas Huth) [RHEL-86670]
  - s390/compat: change default for CONFIG_COMPAT to "n" (Thomas Huth) [RHEL-86670]
  - s390/cio: make sch->lock spinlock pointer a member (Thomas Huth) [RHEL-86670]
  - s390/nmi: implement and use local_mcck_save() / local_mcck_restore() (Thomas Huth) [RHEL-86670]
  - s390/nmi: consistently enable machine checks in trap_init() (Thomas Huth) [RHEL-86670]
  - s390/ctlreg: return old register contents when changing bits (Thomas Huth) [RHEL-86670]
  - s390/traps: only define is_valid_bugaddr() under CONFIG_GENERIC_BUG (Thomas Huth) [RHEL-86670]
  - s390/dasd: remove dasd_stats_generic_show() (Thomas Huth) [RHEL-86670]
  - tty: con3215: drop raw3215_info::ubuffer (Thomas Huth) [RHEL-86670]
  - s390/uvdevice: Report additional-data length for attestation (Thomas Huth) [RHEL-86670]
  - s390/boot: always align vmalloc area on segment boundary (Thomas Huth) [RHEL-86670]
  - s390/sysinfo: add variable capacity information (Thomas Huth) [RHEL-86670]
  - s390/mm: make pte_free_tlb() similar to pXd_free_tlb() (Thomas Huth) [RHEL-86670]
  - s390/mm: use compound page order to distinguish page tables (Thomas Huth) [RHEL-86670]
  - s390/mm: use full 4KB page for 2KB PTE (Thomas Huth) [RHEL-86670]
  - s390/mm: add missing conversion to use ptdescs (Thomas Huth) [RHEL-86670]
  - s390/cmma: rework no-dat handling (Thomas Huth) [RHEL-86670]
  - s390/cmma: move arch_set_page_dat() to header file (Thomas Huth) [RHEL-86670]
  - s390/pai: cleanup event initialization (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: remove per-cpu variable assignement in event initialization (Thomas Huth) [RHEL-86670]
  - s390/pai: initialize event count once at initialization (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: use PERF_ATTACH_TASK define for per task detection (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: dynamically allocate percpu pai crypto map data structure (Thomas Huth) [RHEL-86670]
  - dm mpath: replace spin_lock_irqsave with spin_lock_irq (Benjamin Marzinski) [RHEL-89480]
  - dm-mpath: Don't grab work_mutex while probing paths (Benjamin Marzinski) [RHEL-89480]
  - dm mpath: Interface for explicit probing of active paths (Benjamin Marzinski) [RHEL-89480]
  - dm: Allow .prepare_ioctl to handle ioctls directly (Benjamin Marzinski) [RHEL-89480]
  - rv: Update RHEL kconfigs for 6.15 upstream code (Gabriele Monaco) [RHEL-92623]
  - rv: Fix out-of-bound memory access in rv_is_container_monitor() (Gabriele Monaco) [RHEL-92623]
  - rv: Fix missing unlock on double nested monitors return path (Gabriele Monaco) [RHEL-92623]
  - handle man-page for rv-mon-sched in redhat/kernel.spec.template (Gabriele Monaco) [RHEL-92623]
  - Documentation/rv: Add sched pages to the indices (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Allow rv list to filter for container (Gabriele Monaco) [RHEL-92623]
  - Documentation/rv: Add docs for the sched monitors (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Add support for nested monitors (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Add support for nested monitors (Gabriele Monaco) [RHEL-92623]
  - rv: Add scpd, snep and sncid per-cpu monitors (Gabriele Monaco) [RHEL-92623]
  - rv: Add snroc per-task monitor (Gabriele Monaco) [RHEL-92623]
  - rv: Add sco and tss per-cpu monitors (Gabriele Monaco) [RHEL-92623]
  - rv: Add option for nested monitors and include sched (Gabriele Monaco) [RHEL-92623]
  - sched: Add sched tracepoints for RV task model (Gabriele Monaco) [RHEL-92623]
  - rv: Add license identifiers to monitor files (Gabriele Monaco) [RHEL-92623]
  - tracing: Fix DECLARE_TRACE_CONDITION (Gabriele Monaco) [RHEL-92623]
  - rv: Reset per-task monitors also for idle tasks (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Implement event type detection (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Auto patch current kernel source (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92623]
  - rv: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Add support for name and description options (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: More robust template variables (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Unify main.c templates (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Fix template directory detection (Gabriele Monaco) [RHEL-92623]
  - Documentation/rv: Fix typos (Gabriele Monaco) [RHEL-92623]
  - verification/dot2: Improve dot parser robustness (Gabriele Monaco) [RHEL-92623]
  - rv: Fix a typo (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92623]
  - Documentation/tools/rv: fix document header (Gabriele Monaco) [RHEL-92623]
  - rv: Update rv_en(dis)able_monitor doc to match kernel-doc (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Delete duplicate imports (Gabriele Monaco) [RHEL-92623]
  - rv: Set variable 'da_mon_##name' to static (Gabriele Monaco) [RHEL-92623]
  - tmpfs,xattr: enable limited user extended attributes (Ian Kent) [RHEL-65718]
  - KVM: VMX: Use separate subclasses for PI wakeup lock to squash false positive (Maxim Levitsky) [RHEL-86152]
  - KVM: VMX: Assert that IRQs are disabled when putting vCPU on PI wakeup list (Maxim Levitsky) [RHEL-86152]
  - tracing/osnoise: Allow arbitrarily long CPU string (Tomas Glozar) [RHEL-94317]
  - selftests/bpf: Fix freplace_link segfault in tailcalls prog test (Viktor Malik) [RHEL-85485]
  - bpf: Add tracepoints with null-able arguments (Viktor Malik) [RHEL-85485]
  - bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP (Viktor Malik) [RHEL-85485]
  - bpf: Avoid deadlock caused by nested kprobe and fentry bpf programs (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add tests for raw_tp NULL args (Viktor Malik) [RHEL-85485]
  - bpf: Augment raw_tp arguments with PTR_MAYBE_NULL (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add test for narrow ctx load for pointer args (Viktor Malik) [RHEL-85485]
  - bpf: Check size for BTF-based ctx access of pointer members (Viktor Malik) [RHEL-85485]
  - bpf: Fix theoretical prog_array UAF in __uprobe_perf_func() (Viktor Malik) [RHEL-85485]
  - bpf: fix potential error return (Viktor Malik) [RHEL-85485]
  - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (Viktor Malik) [RHEL-75889 RHEL-85485] {CVE-2024-56675}
  - selftests/bpf: Add more test cases for LPM trie (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Move test_lpm_map.c to map_tests (Viktor Malik) [RHEL-85485]
  - bpf: Use raw_spinlock_t for LPM trie (Viktor Malik) [RHEL-85485]
  - bpf: Switch to bpf mem allocator for LPM trie (Viktor Malik) [RHEL-85485]
  - bpf: Fix exact match conditions in trie_get_next_key() (Viktor Malik) [RHEL-85485]
  - bpf: Handle in-place update for full LPM trie correctly (Viktor Malik) [RHEL-85485]
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Viktor Malik) [RHEL-85485]
  - bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem (Viktor Malik) [RHEL-85485]
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots (Viktor Malik) [RHEL-85485]
  - bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add tests for iter arg check (Viktor Malik) [RHEL-85485]
  - bpf: Ensure reg is PTR_TO_STACK in process_iter_arg (Viktor Malik) [RHEL-85485]
  - bpftool: fix potential NULL pointer dereferencing in prog_dump() (Viktor Malik) [RHEL-85485]
  - bpf: Add kernel symbol for struct_ops trampoline (Viktor Malik) [RHEL-85485]
  - bpf: Use function pointers count as struct_ops links count (Viktor Malik) [RHEL-85485]
  - bpf: Call free_htab_elem() after htab_unlock_bucket() (Viktor Malik) [RHEL-85485 RHEL-89790]
  - bpf: Force uprobe bpf program to always return 0 (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add tests for raw_tp null handling (Viktor Malik) [RHEL-85485]
  - bpf, bpftool: Fix incorrect disasm pc (Viktor Malik) [RHEL-85485]
  - bpf: put bpf_link's program when link is safe to be deallocated (Viktor Malik) [RHEL-78741 RHEL-85485] {CVE-2024-56786}
  - bpf, arm64: Remove garbage frame for struct_ops trampoline (Viktor Malik) [RHEL-85485]
  - selftests/bpf: validate generic bpf_object and subskel APIs work together (Viktor Malik) [RHEL-85485]
  - libbpf: move global data mmap()'ing into bpf_object__load() (Viktor Malik) [RHEL-85485]
  - selftests/bpf: fix test_spin_lock_fail.c's global vars usage (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add test to verify tailcall and freplace restrictions (Viktor Malik) [RHEL-85485]
  - bpf: Prevent tailcall infinite loop caused by freplace (Viktor Malik) [RHEL-85485]
  - libbpf: never interpret subprogs in .text as entry programs (Viktor Malik) [RHEL-85485]
  - libbpf: fix sym_is_subprog() logic for weak global subprogs (Viktor Malik) [RHEL-85485]
  - libbpf: Fix output .symtab byte-order during linking (Viktor Malik) [RHEL-85485]
  - libbpf: Fix expected_attach_type set handling in program load callback (Viktor Malik) [RHEL-85485]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-15
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook
     server certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'
    Resolves: RHEL-78057
    Resolves: RHEL-78313
    Resolves: RHEL-78316


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: Karolina Kula <kkula@redhat.com> - 0.22.0-3
changelog:
  - Fix parsing of the kernel cmdline
  - Require leapp data with provided_data_streams 4.0+
  - Respect the release_id of the OS when processing DNF repositories to apply correct mapping for CentOS Stream
  - Resolves: RHEL-80336


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


