# changelog

author: Augusto Caringi <acaringi@redhat.com> [5.14.0-603.el9]
changelog:
  - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode (Corinna Vinschen) [RHEL-83574]
  - igb: Get rid of spurious interrupts (Corinna Vinschen) [RHEL-83574]
  - igb: Add support for persistent NAPI config (Corinna Vinschen) [RHEL-83574]
  - igb: Link queues to NAPI instances (Corinna Vinschen) [RHEL-83574]
  - igb: Link IRQs to NAPI instances (Corinna Vinschen) [RHEL-83574]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-83574]
  - igb: reject invalid external timestamp requests for 82580-based HW (Corinna Vinschen) [RHEL-83574]
  - igb: Fix passing 0 to ERR_PTR in igb_run_xdp() (Corinna Vinschen) [RHEL-83574]
  - igb: Add AF_XDP zero-copy Tx support (Corinna Vinschen) [RHEL-83574]
  - igb: Add AF_XDP zero-copy Rx support (Corinna Vinschen) [RHEL-83574]
  - igb: Add XDP finalize and stats update functions (Corinna Vinschen) [RHEL-83574]
  - igb: Introduce XSK data structures and helpers (Corinna Vinschen) [RHEL-83574]
  - igb: Introduce igb_xdp_is_enabled() (Corinna Vinschen) [RHEL-83574]
  - igb: Remove static qualifiers (Corinna Vinschen) [RHEL-83574]
  - igbvf: remove unused spinlock (Corinna Vinschen) [RHEL-83574]
  - igb: Fix 2 typos in comments in igb_main.c (Corinna Vinschen) [RHEL-83574]
  - igbvf: Remove two unused declarations (Corinna Vinschen) [RHEL-83574]
  - landlock: Document LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET (Ryan Sullivan) [RHEL-94688]
  - samples/landlock: Add support for abstract UNIX socket scoping (Ryan Sullivan) [RHEL-94688]
  - selftests/landlock: Test inherited restriction of abstract UNIX socket (Ryan Sullivan) [RHEL-94688]
  - selftests/landlock: Test connected and unconnected datagram UNIX socket (Ryan Sullivan) [RHEL-94688]
  - selftests/landlock: Test UNIX sockets with any address formats (Ryan Sullivan) [RHEL-94688]
  - selftests/landlock: Test abstract UNIX socket scoping (Ryan Sullivan) [RHEL-94688]
  - selftests/landlock: Test handling of unknown scope (Ryan Sullivan) [RHEL-94688]
  - landlock: Add abstract UNIX socket scoping (Ryan Sullivan) [RHEL-94688]
  - bpf, sockmap: af_unix stream sockets need to hold ref for pair sock (John Fastabend) [RHEL-94688]
  - landlock: Various documentation improvements (Ryan Sullivan) [RHEL-94688]
  - landlock: Clarify documentation for struct landlock_ruleset_attr (Ryan Sullivan) [RHEL-94688]
  - landlock: Use bit-fields for storing handled layer access masks (Ryan Sullivan) [RHEL-94688]
  - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_acl_bloom_filter: Workaround for some LLVM versions (Ivan Vecera) [RHEL-94569]
  - selftests: vxlan_bridge: Test flood with unresolved FDB entry (Ivan Vecera) [RHEL-94569]
  - mlxsw: Add VXLAN bridge ports to same hardware domain as physical bridge ports (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_switchdev: Move mlxsw_sp_bridge_vxlan_join() (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_switchdev: Add an internal API for VXLAN leave (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum: Call mlxsw_sp_bridge_vxlan_{join, leave}() for VLAN-aware bridge (Ivan Vecera) [RHEL-94569]
  - mlxsw: Trap ARP packets at layer 2 instead of layer 3 (Ivan Vecera) [RHEL-94569]
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw() (Ivan Vecera) [RHEL-94569]
  - mlxsw: Enable Tx checksum offload (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_router: Remove unused functions (Ivan Vecera) [RHEL-94569]
  - mlxsw: Do not store Tx header length as driver parameter (Ivan Vecera) [RHEL-94569]
  - mlxsw: Move Tx header handling to PCI driver (Ivan Vecera) [RHEL-94569]
  - mlxsw: Define Tx header fields in txheader.h (Ivan Vecera) [RHEL-94569]
  - mlxsw: Initialize txhdr_info according to PTP operations (Ivan Vecera) [RHEL-94569]
  - mlxsw: Add mlxsw_txhdr_info structure (Ivan Vecera) [RHEL-94569]
  - net/mlxfw: Drop hard coded max FW flash image size (Ivan Vecera) [RHEL-94569]
  - selftests/net/forwarding: teamd command not found (Ivan Vecera) [RHEL-94569]
  - mlxsw: Switch to napi_gro_receive() (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_flower: Do not allow mixing sample and mirror actions (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4 (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: devlink_trap_police: Use defer for test cleanup (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: qos_max_descriptors: Use defer for test cleanup (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: qos_ets_strict: Use defer for test cleanup (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: qos_mc_aware: Use defer for test cleanup (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sch_red_core: Lower TBF rate (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sch_red_core: Send more packets for drop tests (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sch_red_core: Sleep before querying queue depth (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sch_red_core: Increase backlog size tolerance (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sch_red_ets: Increase required backlog (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: rtnetlink: Use devlink_reload() API (Ivan Vecera) [RHEL-94569]
  - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Ivan Vecera) [RHEL-94569]
  - wifi: ath12k: fix uaf in ath12k_core_init() (CKI Backport Bot) [RHEL-102086] {CVE-2025-38116}
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103375]
  - Input: synaptics - fix crash when enabling pass-through port (CKI Backport Bot) [RHEL-81215] {CVE-2025-21746}
  - Input: serio - define serio_pause_rx guard to pause and resume serio ports (CKI Backport Bot) [RHEL-81215] {CVE-2025-21746}
  - x86/efistub: Omit physical KASLR when memory reservations exist (Charles Haithcock) [RHEL-83461]
  - usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-100939]
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-100939]
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-100939]
  - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CKI Backport Bot) [RHEL-81477] {CVE-2024-57986}
  - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-75594]
  - bridge: netfilter: Fix forwarding of fragmented packets (Mohammad Heib) [RHEL-75594]
  - selftests: net/bridge : add tests for per vlan snooping with stp state changes (Mohammad Heib) [RHEL-75594]
  - net: bridge: mcast: update multicast contex when vlan state is changed (Mohammad Heib) [RHEL-75594]
  - net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions (Mohammad Heib) [RHEL-75594]
  - net: bridge: switchdev: do not notify new brentries as changed (Mohammad Heib) [RHEL-75594]
  - net: bridge: locally receive all multicast packets if IFF_ALLMULTI is set (Mohammad Heib) [RHEL-75594]
  - net: bridge: mcast: Notify on mdb offload failure (Mohammad Heib) [RHEL-75594]
  - net: bridge: Add offload_fail_notification bopt (Mohammad Heib) [RHEL-75594]
  - net: bridge: mcast: Add offload failed mdb flag (Mohammad Heib) [RHEL-75594]
  - selftests: test_bridge_neigh_suppress: Test unicast ARP/NS with suppression (Mohammad Heib) [RHEL-75594]
  - net: bridge: Prevent unicast ARP/NS packets from being suppressed by bridge (Mohammad Heib) [RHEL-75594]
  - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. (Mohammad Heib) [RHEL-75594]
  - net: switchdev: Convert blocking notification chain to a raw one (Mohammad Heib) [RHEL-75594]
  - bridge: mdb: Allow replace of a host-joined group (Mohammad Heib) [RHEL-75594]
  - bridge: Make br_is_nd_neigh_msg() accept pointer to "const struct sk_buff" (Mohammad Heib) [RHEL-75594]
  - selftests: net: Add a VLAN bridge binding selftest (Mohammad Heib) [RHEL-75594]
  - selftests: net: lib: Add a couple autodefer helpers (Mohammad Heib) [RHEL-75594]
  - selftests: net: lib: Add several autodefer helpers (Mohammad Heib) [RHEL-75594]
  - net: bridge: Handle changes in VLAN_FLAG_BRIDGE_BINDING (Mohammad Heib) [RHEL-75594]
  - net: bridge: Extract a helper to handle bridge_binding toggles (Mohammad Heib) [RHEL-75594]
  - bridge: Allow deleting FDB entries with non-existent VLAN (Mohammad Heib) [RHEL-75594]
  - bridge: Handle error of rtnl_register_module(). (Mohammad Heib) [RHEL-75594]
  - rcu/nocb: Fix missed RCU barrier on deoffloading (Čestmír Kalina) [RHEL-79879]
  - Revert "rcu/nocb: Fix rcuog wake-up from offline softirq" (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove swake_up_one_online() bandaid (Čestmír Kalina) [RHEL-79879]
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING (Čestmír Kalina) [RHEL-79879]
  - hrtimer: Select housekeeping CPU during migration (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Fix rcuog wake-up from offline softirq (Čestmír Kalina) [RHEL-79879]
  - rcu/kvfree: Refactor kvfree_rcu_queue_batch() (Čestmír Kalina) [RHEL-79879]
  - rcu/kvfree: Add kvfree_rcu_barrier() API (Čestmír Kalina) [RHEL-79879]
  - refscale: Constify struct ref_scale_ops (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Count outstanding callbacks per-task rather than per-CPU (Čestmír Kalina) [RHEL-79879]
  - rcuscale: NULL out top-level pointers to heap memory (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Use special allocator for rcu_scale_writer() (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Make rcu_scale_writer() tolerate repeated GFP_KERNEL  failure (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Make all writer tasks report upon hang (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Provide clear error when async specified without primitives (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Print detailed grace-period and barrier diagnostics (Čestmír Kalina) [RHEL-79879]
  - rcu: Mark callbacks not currently participating in barrier operation (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Dump grace-period statistics when rcu_scale_writer() stalls (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Dump stacks of stalled rcu_scale_writer() instances (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Save a few lines with whitespace-only change (Čestmír Kalina) [RHEL-79879]
  - rcu/tasks: Add rcu_barrier_tasks*() start time to diagnostics (Čestmír Kalina) [RHEL-79879]
  - rcu/tasks: Add detailed grace-period and barrier diagnostics (Čestmír Kalina) [RHEL-79879]
  - rcu/tasks: Mark callbacks not currently participating in barrier  operation (Čestmír Kalina) [RHEL-79879]
  - rcu: Provide rcu_barrier_cb_is_done() to check rcu_barrier() CBs (Čestmír Kalina) [RHEL-79879]
  - rcu/tasks: Update rtp->tasks_gp_seq comment (Čestmír Kalina) [RHEL-79879]
  - rcu/tasks: Check processor-ID assumptions (Čestmír Kalina) [RHEL-79879]
  - rcu-tasks: Fix access non-existent percpu rtpcp variable in  rcu_tasks_need_gpcb() (Čestmír Kalina) [RHEL-79879]
  - srcu: Mark callbacks not currently participating in barrier operation (Čestmír Kalina) [RHEL-79879]
  - rcu: Summarize RCU CPU stall warnings during CSD-lock stalls (Čestmír Kalina) [RHEL-79879]
  - locking/csd_lock: Provide an indication of ongoing CSD-lock stall (Čestmír Kalina) [RHEL-79879]
  - locking/csd_lock: Print large numbers as negatives (Čestmír Kalina) [RHEL-79879]
  - rcu: Defer printing stall-warning backtrace when holding rcu_node  lock (Čestmír Kalina) [RHEL-79879]
  - rcu: Let dump_cpu_task() be used without preemption disabled (Čestmír Kalina) [RHEL-79879]
  - rcu: Summarize expedited RCU CPU stall warnings during CSD-lock  stalls (Čestmír Kalina) [RHEL-79879]
  - rcu: Extract synchronize_rcu_expedited_stall() from  synchronize_rcu_expedited_wait() (Čestmír Kalina) [RHEL-79879]
  - srcu: Check for concurrent updates of heuristics (Čestmír Kalina) [RHEL-79879]
  - srcu: faster gp seq wrap-around (Čestmír Kalina) [RHEL-79879]
  - rcu: Annotate struct kvfree_rcu_bulk_data with __counted_by() (Čestmír Kalina) [RHEL-79879]
  - rcu: Better define "atomic" for list replacement (Čestmír Kalina) [RHEL-79879]
  - rcu/kfree: Warn on unexpected tail state (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename rcu_dyntick trace event into  rcu_watching (Čestmír Kalina) [RHEL-79879]
  - rcu: Update stray documentation references to  rcu_dynticks_eqs_{enter, exit}() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_momentary_dyntick_idle() into rcu_momentary_eqs() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_implicit_dynticks_qs() into  rcu_watching_snap_recheck() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename dyntick_save_progress_counter() into  rcu_watching_snap_save() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename struct rcu_data .exp_dynticks_snap into  .exp_watching_snap (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename struct rcu_data .dynticks_snap into .watching_snap (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_dynticks_zero_in_eqs() into  rcu_watching_zero_in_eqs() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_dynticks_in_eqs_since() into  rcu_watching_snap_stopped_since() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_dynticks_in_eqs() into rcu_watching_snap_in_eqs() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_dynticks_eqs_online() into rcu_watching_online() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename rcu_dynticks_curr_cpu_in_eqs() into rcu_is_watching_curr_cpu() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename rcu_dynticks_task*() into rcu_task*() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename DYNTICK_IRQ_NONIDLE into  CT_NESTING_IRQ_NONIDLE (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_nmi_nesting_cpu() into  ct_nmi_nesting_cpu() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_nmi_nesting() into  ct_nmi_nesting() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename struct context_tracking  .dynticks_nmi_nesting into .nmi_nesting (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_nesting_cpu() into  ct_nesting_cpu() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_nesting() into ct_nesting() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename struct context_tracking  .dynticks_nesting into .nesting (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_cpu() into  ct_rcu_watching_cpu() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks() into ct_rcu_watching() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename RCU_DYNTICKS_IDX into CT_RCU_WATCHING (Čestmír Kalina) [RHEL-79879]
  - treewide: context_tracking: Rename CONTEXT_* into CT_STATE_* (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_cpu_acquire() into  ct_rcu_watching_cpu_acquire() (Čestmír Kalina) [RHEL-79879]
  - rcu-tasks: Make Tasks RCU wait idly for grace-period delays (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add a stall_cpu_repeat module parameter (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add rcutree.nohz_full_patience_delay to TREE07 (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add mid-sized stall to TREE07 (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Make rcu_torture_write_types() print number of update  types (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Generic test for NUM_ACTIVE_*RCU_POLL* (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add SRCU ->same_gp_state and ->get_comp_state functions (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Remove redundant rcu_torture_ops get_gp_completed fields (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove superfluous memory barrier after bypass enqueue (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Conditionally wake up rcuo if not already waiting on GP (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Fix RT throttling hrtimer armed from offline CPU (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Simplify (de-)offloading state machine (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove SEGCBLIST_KTHREAD_CB (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove SEGCBLIST_RCU_CORE (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove halfway (de-)offloading handling from rcu_core (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove halfway (de-)offloading handling from rcu_core()'s  QS reporting (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove halfway (de-)offloading handling from bypass (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: (De-)offload callbacks on offline CPUs only (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Introduce nocb mutex (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Assert no callbacks while nocb kthread allocation fails (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Move nocb field at the end of state struct (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Introduce RCU_NOCB_LOCKDEP_WARN() (Čestmír Kalina) [RHEL-79879]
  - srcu: Fill out polled grace-period APIs (Čestmír Kalina) [RHEL-79879]
  - srcu: Update cleanup_srcu_struct() comment (Čestmír Kalina) [RHEL-79879]
  - srcu: Add NUM_ACTIVE_SRCU_POLL_OLDSTATE (Čestmír Kalina) [RHEL-79879]
  - tools/rcu: Add rcu-updaters.sh script (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add missing MODULE_DESCRIPTION() macros (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Fix rcu_torture_fwd_cb_cr() data race (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Make rcutorture support srcu double call test (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove buggy bypass lock contention mitigation (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Use kthread parking instead of ad-hoc implementation (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Fix segcblist state machine stale comments about timers (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Fix segcblist state machine comments about bypass (Čestmír Kalina) [RHEL-79879]
  - rcu/exp: Remove redundant full memory barrier at the end of GP (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove full memory barrier on RCU stall printout (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove full memory barrier on boot time eqs sanity check (Čestmír Kalina) [RHEL-79879]
  - rcu/exp: Remove superfluous full memory barrier upon first EQS  snapshot (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove superfluous full memory barrier upon first EQS snapshot (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove full ordering on second EQS snapshot (Čestmír Kalina) [RHEL-79879]
  - rcu: Fix rcu_barrier() VS post CPUHP_TEARDOWN_CPU invocation (Čestmír Kalina) [RHEL-79879]
  - rcu: Eliminate lockless accesses to rcu_sync->gp_count (Čestmír Kalina) [RHEL-79879]
  - srcu: Disable interrupts directly in srcu_gp_end() (Čestmír Kalina) [RHEL-79879]
  - rcu: Disable interrupts directly in rcu_gp_init() (Čestmír Kalina) [RHEL-79879]
  - rcu/tree: Reduce wake up for synchronize_rcu() common case (Čestmír Kalina) [RHEL-79879]
  - rcu: Add lockdep_assert_in_rcu_read_lock() and friends (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Enable RCU priority boosting for TREE09 (Čestmír Kalina) [RHEL-79879]
  - rcu/sync: remove un-used rcu_sync_enter_start function (Čestmír Kalina) [RHEL-79879]
  - Documentation: RCU: Remove repeated word in comments (Čestmír Kalina) [RHEL-79879]
  - doc: Add refscale.lookup_instances to kernel-parameters.txt (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove references to rcu_migrate_callbacks() from diagrams (Čestmír Kalina) [RHEL-79879]
  - rcu: Describe listRCU read-side guarantees (Čestmír Kalina) [RHEL-79879]
  - Documentation: RCU: Fix section numbers after adding Section 7 in  whatisRCU.rst (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add CONFIG_DEBUG_OBJECTS to RCU Tasks testing (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Remove obsolete parameter check from mkinitrd.sh (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Remove contradictory Kconfig constraint (Čestmír Kalina) [RHEL-79879]
  - torture: Add "--no-" as synonym for "--do-no-" in torture.sh (Čestmír Kalina) [RHEL-79879]
  - torture: Make torture.sh help message match reality (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove formal-verification tests (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Print grace-period kthread CPU time, if recorded (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Add kfree_by_call_rcu and kfree_mult to documentation (Čestmír Kalina) [RHEL-79879]
  - checkpatch: Complain about unexpected uses of RCU Tasks Trace (Čestmír Kalina) [RHEL-79879]
  - Docs/RCU/rculist_nulls: Fix text about atomic_set_release() (Čestmír Kalina) [RHEL-79879]
  - Docs/RCU/rculist_nulls: Fix hlist_[nulls]_head field names of 'obj' (Čestmír Kalina) [RHEL-79879]
  - Docs/RCU/rculist_nulls: Specify type of the object in examples (Čestmír Kalina) [RHEL-79879]
  - Docs/RCU/rculist_nulls: Assign 'obj' before use from the examples (Čestmír Kalina) [RHEL-79879]
  - Docs/RCU/rculist_nulls: Fix trivial coding style (Čestmír Kalina) [RHEL-79879]
  - doc: Update and wordsmith rculist_nulls.rst (Čestmír Kalina) [RHEL-79879]
  - docs/RCU: Add the missing rcu_read_unlock() (Čestmír Kalina) [RHEL-79879]
  - documentation/rcu: Fix typo (Čestmír Kalina) [RHEL-79879]
  - x86/cpu/amd: Fix workaround for erratum 1054 (Michael Petlan) [RHEL-98688]
  - perf arm-spe: Dump metadata with version 2 (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Calculate meta data size (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Save per CPU information in metadata (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Use old behavior when opening old SPE files (Anubhav Shelat) [RHEL-60216]
  - tools/include: Sync arm64 headers with the kernel sources (Anubhav Shelat) [RHEL-60216]
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Add Cortex CPUs to common data source encoding list (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Add Neoverse-V2 to common data source encoding list (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Remove the unused 'midr' field (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Use metadata to decide the data source feature (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Introduce arm_spe__is_homogeneous() (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Define metadata header version 2 (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Support metadata version 2 (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Rename the common data source encoding (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Rename arm_spe__synth_data_source_generic() (Anubhav Shelat) [RHEL-60216]
  - HID: thrustmaster: fix memory leak in thrustmaster_interrupts() (CKI Backport Bot) [RHEL-81416] {CVE-2024-57993}
  - HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints() (CKI Backport Bot) [RHEL-81416] {CVE-2024-57993}
  - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (CKI Backport Bot) [RHEL-81416] {CVE-2024-57993}
  - redhat: Mark CONFIG_RANDOMIZE_IDENTITY_BASE as disabled (Thomas Huth) [RHEL-103929]
  - s390/mm: Pin identity mapping base to zero (Thomas Huth) [RHEL-103929]
  - s390/mm: Prevent lowcore vs identity mapping overlap (Thomas Huth) [RHEL-103929]
  - powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (Eder Zulian) [RHEL-104297]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-604.el9]
changelog:
  - net: e1000e: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-99399]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99399]
  - e1000e: change k1 configuration on MTP and later platforms (Corinna Vinschen) [RHEL-99399]
  - e1000e: Fix real-time violations on link up (Corinna Vinschen) [RHEL-99399]
  - e1000e: Link NAPI instances to queues and IRQs (Corinna Vinschen) [RHEL-99399]
  - e1000e: Remove duplicated writel() in e1000_configure_tx/rx() (Corinna Vinschen) [RHEL-99399]
  - net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103029] {CVE-2025-38124}
  - scsi: storvsc: Increase the timeouts to storvsc_timeout JIRA: https://issues.redhat.com/browse/RHEL-100669 (Dexuan Cui)
  - dpll: add phase_offset_monitor_get/set callback ops (Ivan Vecera) [RHEL-105066]
  - dpll: add phase-offset-monitor feature to netlink spec (Ivan Vecera) [RHEL-105066]
  - devlink: Add new "clock_id" generic device param (Ivan Vecera) [RHEL-105064]
  - devlink: Add support for u64 parameters (Ivan Vecera) [RHEL-105064]
  - netlink: specs: devlink: replace underscores with dashes in names (Ivan Vecera) [RHEL-105064]
  - devlink: Add new "enable_phc" generic device param (Ivan Vecera) [RHEL-105064]
  - netlink: fix policy dump for int with validation callback (Ivan Vecera) [RHEL-105064]
  - devlink: use DEVLINK_VAR_ATTR_TYPE_* instead of NLA_* in fmsg (Ivan Vecera) [RHEL-105064]
  - devlink: avoid param type value translations (Ivan Vecera) [RHEL-105064]
  - devlink: define enum for attr types of dynamic attributes (Ivan Vecera) [RHEL-105064]
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103260] {CVE-2025-38250}
  - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95607]
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103158] {CVE-2025-38159}
  - wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103222] {CVE-2025-38292}
  - bnxt_en: Flush FW trace before copying to the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: fix module unload sequence (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix ethtool -d byte order for 32-bit values (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix coredump logic to free allocated buffer (Shruti Parab) [RHEL-76568]
  - bnxt_en: delay pci_alloc_irq_vectors() in the AER path (Shruti Parab) [RHEL-76568]
  - bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix ethtool selftest output in one of the failure cases (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix error handling path in bnxt_init_chip() (Shruti Parab) [RHEL-76568]
  - bnxt_en: improve TX timestamping FIFO configuration (Shruti Parab) [RHEL-76568]
  - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code (Shruti Parab) [RHEL-76568]
  - bnxt_en: Remove unused macros in bnxt_ulp.h (Shruti Parab) [RHEL-76568]
  - bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp (Shruti Parab) [RHEL-76568]
  - bnxt_en: Report the ethtool coredump length after copying the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: Change FW message timeout warning (Shruti Parab) [RHEL-76568]
  - bnxt_en: Linearize TX SKB if the fragments exceed the max (Shruti Parab) [RHEL-76568]
  - bnxt_en: Mask the bd_cnt field in the TX BD properly (Shruti Parab) [RHEL-76568]
  - bnxt_en: add .set_module_eeprom_by_page() support (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_get_module_eeprom_by_page() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update firmware interface to 1.10.3.97 (Shruti Parab) [RHEL-76568]
  - bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add devlink support for ENABLE_ROCE nvm parameter (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_hwrm_nvm_req() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add support for a new ethtool dump flag 3 (Shruti Parab) [RHEL-76568]
  - bnxt_en: Extend queue stop/start for TX rings (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor TX ring free logic (Shruti Parab) [RHEL-76568]
  - bnxt_en: Reallocate RX completion ring for TPH support (Shruti Parab) [RHEL-76568]
  - bnxt_en: Pass NQ ID to the FW when allocating RX/RX AGG rings (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor RX/RX AGG ring parameters setup for P5_PLUS (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_free_tx_rings() to free per TX ring (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor completion ring free routine (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor TX ring allocation logic (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor completion ring allocation logic for P5_PLUS chips (Shruti Parab) [RHEL-76568]
  - bnxt_en: Set NPAR 1.2 support when registering with firmware (Shruti Parab) [RHEL-76568]
  - eth: bnxt: update header sizing defaults (Shruti Parab) [RHEL-76568]
  - eth: bnxt: allocate enough buffer space to meet HDS threshold (Shruti Parab) [RHEL-76568]
  - eth: bnxt: apply hds_thrs settings correctly (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for hds-thresh ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for tcp-data-split ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for rx-copybreak ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip reading PXP registers during ethtool -d if unsupported (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (Shruti Parab) [RHEL-76568]
  - bnxt_en: Do not allow ethtool -m on an untrusted VF (Shruti Parab) [RHEL-76568]
  - bnxt_en: Use FW defined resource limits for RoCE (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix potential crash when dumping FW log coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: handle tpa_info in queue API implementation (Shruti Parab) [RHEL-76568]
  - bnxt_en: refactor bnxt_alloc_rx_rings() to call bnxt_alloc_rx_agg_bmap() (Shruti Parab) [RHEL-76568]
  - bnxt_en: refactor tpa_info alloc/free into helpers (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add FW trace coredump segments to the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add a new ethtool -W dump flag (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add 2 parameters to bnxt_fill_coredump_seg_hdr() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add functions to copy host context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Do not free FW log context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Manage the FW trace context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Allocate backing store memory for FW trace logs (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update firmware interface spec to 1.10.3.85 (Shruti Parab) [RHEL-76568]
  - bnxt_en: optimize gettimex64 (Shruti Parab) [RHEL-76568]
  - eth: bnxt: use page pool for head frags (Shruti Parab) [RHEL-76568]
  - bnxt_en: add unlocked version of bnxt_refclk_read (Shruti Parab) [RHEL-76568]
  - bnxt_en: replace PTP spinlock with seqlock (Shruti Parab) [RHEL-76568]
  - bnxt_en: cache only 24 bits of hw counter (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update bnxt.rst devlink documentation (Shruti Parab) [RHEL-76568]
  - cpufreq: tegra: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix setting policy limits when frequency tables are used (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Limit resolving a frequency to policy min/max (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Avoid using inconsistent policy->min and policy->max (Mark Langsdorf) [RHEL-83803]
  - cpufreq: cppc: Fix invalid return value in .get() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: intel_pstate: Fix hwp_get_cpu_scaling() (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Enable ITMT support after initializing core rankings (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Init cpufreq only for present CPUs (Mark Langsdorf) [RHEL-83803]
  - cpufreq: tegra186: Share policy per cluster (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Fix min_limit perf and freq updation for performance governor (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop actions in amd_pstate_epp_cpu_offline() (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Stop caching EPP (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Rework CPPC enabling (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop debug statements for policy setting (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Update cppc_req_cached for shared mem EPP writes (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Move all EPP tracing into *_update_perf and *_set_epp functions (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Cache CPPC request in shared mem case too (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Replace all AMD_CPPC_* macros with masks (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Adjust variable scope (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Run on all of the correct CPUs (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Drop SUCCESS and FAIL enums (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Allow lowest nonlinear and lowest to be the same (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Use _free macro to free put policy (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop `cppc_cap1_cached` (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Overhaul locking (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Move perf values into a union (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop min and max cached frequencies (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Show a warning when a CPU fails to setup (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Fix the clamping of perf values (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the unncecessary driver_lock in amd_pstate_update_limits (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the unnecessary cpufreq_update_policy call (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Modularize perf<->freq conversion (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Convert all perf values to u8 (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Pass min/max_limit_perf as min/max_perf to amd_pstate_update (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the redundant des_perf clamping in adjust_perf (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Modify the min_perf calculation in adjust_perf callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Remove cpufreq_enable_boost_support() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: staticize policy_has_boost_freq() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: amd: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powernv: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: vexpress: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Stop checking for duplicate available/boost freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sc520_freq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: spear: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powernow: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pmac: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qoriq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: imx6q: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: davinci: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: kirkwood: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: p4: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: omap: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: e_powersaver: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: elanfreq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pasemi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: mediatek: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: acpi: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Always create freq-table related sysfs file (Mark Langsdorf) [RHEL-83803]
  - cpufreq: bmips: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: compare kHz instead of Hz (Mark Langsdorf) [RHEL-83803]
  - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Re-sync CPU boost state on system resume (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Restrict enabling boost on policies with no boost frequencies (Mark Langsdorf) [RHEL-83803]
  - cpufreq: cppc: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: acpi: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Export cpufreq_boost_set_sw() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Introduce policy->boost_supported flag (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use str_enable_disable() helper (Mark Langsdorf) [RHEL-83803]
  - cpufreq: prevent NULL dereference in cpufreq_online() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Remove set_boost in acpi_cpufreq_cpu_init() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Introduce a more generic way to set default per-policy boost flag (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix re-boost issue after hotplugging a CPU (Mark Langsdorf) [RHEL-83803]
  - cpufreq: s3c64xx: Fix compilation warning (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use str_enable_disable()-like helpers (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Fix max-frequency computation (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Register for limit change notifications (Mark Langsdorf) [RHEL-83803]
  - cpufreq: maple: Remove maple driver (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Simplify MSR read on the boot CPU (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Fix cleanup path when boost enablement fails (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83803]
  - Revert "cpufreq: brcmstb-avs-cpufreq: Fix initial command check" (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: add virtual-cpufreq driver (Mark Langsdorf) [RHEL-83803]
  - redhat/configs: Enabled CPUFREQ_VIRT (Mark Langsdorf) [RHEL-83803]
  - cpufreq: use proper units for frequency (Mark Langsdorf) [RHEL-83803]
  - cpufreq/cppc: Use NSEC_PER_MSEC for deadline task (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix the cacography in powernv-cpufreq.c (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix warning on unused of_device_id tables for !CONFIG_OF (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Drop CONFIG_ARM and CONFIG_ARM64 dependency on Arm drivers (Mark Langsdorf) [RHEL-83803]
  - cpufreq: omap: Drop asm includes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Add explicit io.h include for readl/writel_relaxed (Mark Langsdorf) [RHEL-83803]
  - cpufreq: spear: Use of_property_for_each_u32() instead of open coding (Mark Langsdorf) [RHEL-83803]
  - redhat/configs: make ACPI_CPPC_CPUFREQ generic (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use of_property_present() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powerpc: add missing MODULE_DESCRIPTION() macros (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sti: fix build warning (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Make cpufreq_driver->exit() return void (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pcc: Remove empty exit() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: nforce2: Remove empty exit() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Mark boost policy as enabled when setting boost (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Allow drivers to advertise boost enabled (Mark Langsdorf) [RHEL-83803]
  - cpufreq: make cpufreq_boost_enabled() return bool (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sti: add missing MODULE_DEVICE_TABLE entry for stih418 (Mark Langsdorf) [RHEL-83803]
  - cpufreq: simplify boolean parsing with kstrtobool in store function (Mark Langsdorf) [RHEL-83803]
  - cpufreq: update to sysfs_emit() for safer buffer handling (Mark Langsdorf) [RHEL-83803]
  - cpufreq/cppc: Don't compare desired_perf in target() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: fix memory leaks in probe error paths (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Avoid overflow of target_freq in fast switch (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: add support for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - soc: qcom: socinfo: Add SoC ID for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - dt-bindings: arm: qcom,ids: Add SoC ID for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - powerpc: rename SPRN_HID2 define to SPRN_HID2_750FX (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix up printing large CPU numbers and frequency values (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ti: Implement scope-based cleanup in ti_cpufreq_match_node() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: Blocklist Allwinner H616/618 SoCs (Mark Langsdorf) [RHEL-83803]
  - cpupfreq: tegra124: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use a smaller freq for the policy->max when verify (Mark Langsdorf) [RHEL-83803]
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-92556]
  - x86/sev: Make sure pages are not skipped during kdump (Bandan Das) [RHEL-10019]
  - x86/sev: Do not touch VMSA pages during SNP guest memory kdump (Bandan Das) [RHEL-10019]
  - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-79685]
  - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-79685]
  - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-79685]
  - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-79685] {CVE-2025-38053}
  - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-79685 RHEL-93924]
  - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-79685]
  - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-66157 RHEL-79685 RHEL-82204]
  - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-79685 RHEL-93924] {CVE-2025-22065}
  - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-79685] {CVE-2025-22116}
  - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-79685] {CVE-2025-21890}
  - libeth: move idpf_rx_csum_decoded and idpf_rx_extracted (Michal Schmidt) [RHEL-79685]
  - idpf: record rx queue in skb for RSC packets (Michal Schmidt) [RHEL-79685]
  - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-79685]
  - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-79685]
  - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-79685 RHEL-82469] {CVE-2024-58057}
  - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-79685]
  - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-79685]
  - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-79685]
  - i2c: designware: add a new bit check for IC_CON control (John Allen) [RHEL-78660]
  - perf/x86/intel: Add Panther Lake support (Michael Petlan) [RHEL-47406 RHEL-47452]
  - perf/x86/intel: Add PMU support for Clearwater Forest (Michael Petlan) [RHEL-45093 RHEL-47454]
  - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106622] {CVE-2025-38380}
  - tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106083] {CVE-2025-38471}
  - ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-104380]
  - ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-104380]
  - ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-104380]
  - ice: wait before enabling TSPLL (Petr Oros) [RHEL-104380]
  - ice: add multiple TSPLL helpers (Petr Oros) [RHEL-104380]
  - ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-104380]
  - ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-104380]
  - ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-104380]
  - ice: add TSPLL log config helper (Petr Oros) [RHEL-104380]
  - ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-104380]
  - ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-104380]
  - ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-104380]
  - ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-104380]
  - ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-104380]
  - ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-104380]
  - ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-104380]
  - ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-104380]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-605.el9]
changelog:
  - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-91331]
  - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64457]
  - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64457]
  - mux: Add support for reading mux state from consumer DT node (Radu Rendec) [RHEL-105629]
  - mux: add support for delay after muxing (Radu Rendec) [RHEL-105629]
  - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-87983]
  - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-87983]
  - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-87983]
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-87983]
  - can: tcan4x5x: fix reset gpio usage during probe (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_close(): stop clocks after device has been shut down (Radu Rendec) [RHEL-90130]
  - can: m_can: Limit coalescing to peripheral instances (Radu Rendec) [RHEL-90130]
  - can: m_can: Reset cached active_interrupts on start (Radu Rendec) [RHEL-90130]
  - can: m_can: disable_all_interrupts, not clear active_interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Do not cancel timer from within timer (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove m_can_rx_peripheral indirection (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove coalesing disable in isr during suspend (Radu Rendec) [RHEL-90130]
  - can: m_can: Reset coalescing during suspend/resume (Radu Rendec) [RHEL-90130]
  - can: mcp251xfd: __mcp251xfd_get_berr_counter(): use CAN_BUS_OFF_THRESHOLD instead of open coding it (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_cmd_reset(): use cpu_to_le32() to assign mode (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Add support for Leaf v3 (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: support resuming from rx interrupt signal (Radu Rendec) [RHEL-90130]
  - can: m_can: allow keeping the transceiver running in suspend (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: Document the wakeup-source flag (Radu Rendec) [RHEL-90130]
  - can: m_can: remove redundant check for pm_clock_support (Radu Rendec) [RHEL-90130]
  - can: netlink: Fix TDCO calculation using the old data bittiming (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement transmit submission coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement BQL (Radu Rendec) [RHEL-90130]
  - can: m_can: Use tx_fifo_in_flight for netif_queue control (Radu Rendec) [RHEL-90130]
  - can: m_can: Introduce a tx_fifo_in_flight counter (Radu Rendec) [RHEL-90130]
  - can: m_can: Use the workqueue as queue (Radu Rendec) [RHEL-90130]
  - can: m_can: Cache tx putidx (Radu Rendec) [RHEL-90130]
  - can: m_can: Use u32 for putidx (Radu Rendec) [RHEL-90130]
  - can: m_can: Add tx coalescing ethtool support (Radu Rendec) [RHEL-90130]
  - can: m_can: Add rx coalescing ethtool support (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement transmit coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement receive coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Write transmit header and data in one transaction (Radu Rendec) [RHEL-90130]
  - can: m_can: Move hrtimer init to m_can_class_register (Radu Rendec) [RHEL-90130]
  - can: m_can: Start/Cancel polling timer together with interrupts (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Fix id2_register for tcan4553 (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): move debug message and stats after successful restart (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): reverse logic to remove need for goto (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): don't crash kernel if carrier is OK (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: m_can: change from additional- to unevaluatedProperties (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Add error messages in probe (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Add support for tcan4552/4553 (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Rename ID registers to match datasheet (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Check size of mram configuration (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Remove reserved register 0x814 from writable table (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: Add tcan4552 and tcan4553 variants (Radu Rendec) [RHEL-90130]
  - can: gs_usb: convert to NAPI/rx-offload to avoid OoO reception (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_disconnect(): remove not needed usb_kill_anchored_urbs() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_destroy_candev(): remove not needed usb_kill_anchored_urbs() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_close(): don't complain about failed device reset during ndo_stop (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_start_xmit(), gs_can_open(): clean up printouts in error path (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): make use of stats (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): make use of netdev (Radu Rendec) [RHEL-90130]
  - can: gs_usb: uniformly use "parent" as variable name for struct gs_usb (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_set_timestamp(): remove return statements form void function (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_probe(): align block comment (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove leading space from goto labels (Radu Rendec) [RHEL-90130]
  - can: Explicitly include correct DT includes, part 2 (Radu Rendec) [RHEL-90130]
  - can: peak_usb: remove unused/legacy peak_usb_netif_rx() function (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Radu Rendec) [RHEL-90130]
  - can: m_can: Add hrtimer to generate software interrupt (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Remove interrupt properties for MCAN (Radu Rendec) [RHEL-90130]
  - can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout (Radu Rendec) [RHEL-90130]
  - can: gs_usb: fix time stamp counter initialization (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): improve error handling (Radu Rendec) [RHEL-90130]
  - can: rx-offload: fix coding style (Radu Rendec) [RHEL-90130]
  - can: m_can: fix coding style (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Add len8_dlc support (Radu Rendec) [RHEL-90130]
  - can: m_can: Convert to platform remove callback returning void (Radu Rendec) [RHEL-90130]
  - can: dev: fix missing CAN XL support in can_put_echo_skb() (Radu Rendec) [RHEL-90130]
  - kvaser_usb: convert USB IDs to hexadecimal values (Radu Rendec) [RHEL-90130]
  - can: m_can: Keep interrupts enabled during peripheral read (Radu Rendec) [RHEL-90130]
  - can: m_can: Disable unused interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove double interrupt enable (Radu Rendec) [RHEL-90130]
  - can: m_can: Always acknowledge all interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove repeated check for is_peripheral (Radu Rendec) [RHEL-90130]
  - can: bittiming: can_fixup_bittiming(): set effective tq (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove gs_can::iface (Radu Rendec) [RHEL-90130]
  - can: m_can: Add check for devm_clk_get (Radu Rendec) [RHEL-90130]
  - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (Radu Rendec) [RHEL-90130 RHEL-90138] {CVE-2022-49024}
  - can: kvaser_usb: Fix possible completions during init_completion (Radu Rendec) [RHEL-90130]
  - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Radu Rendec) [RHEL-90130]
  - can: m_can: use consistent indention (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add support for reading error counters (Radu Rendec) [RHEL-90130]
  - can: gs_usb: document GS_CAN_FEATURE_GET_STATE (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add ability to enable / disable berr reporting (Radu Rendec) [RHEL-90130]
  - can: gs_usb: document GS_CAN_FEATURE_BERR_REPORTING (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): merge setting of timestamp flags and init (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): sort checks for ctrlmode (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): allow loopback and listen only at the same time (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_make_candev(): set netdev->dev_id (Radu Rendec) [RHEL-90130]
  - can: gs_usb: mention candleLight as supported device (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_handle_bus_errors(): add support for handling DLEC error on CAN-FD frames (Radu Rendec) [RHEL-90130]
  - can: m_can: is_lec_err(): clean up LEC error handling (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Remove -Warray-bounds exception (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove dma allocations (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add switchable termination support (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_make_candev(): clean up error handling (Radu Rendec) [RHEL-90130]
  - can: gs_usb: convert from usb_control_msg() to usb_control_msg_{send,recv}() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_cmd_reset(): rename variable holding struct gs_can pointer to dev (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: kvaser_usb_hydra: Use kzalloc for allocating only one element (Radu Rendec) [RHEL-90130]
  - can: rx-offload: can_rx_offload_init_queue(): fix typo (Radu Rendec) [RHEL-90130]
  - dt-binding: can: mcp251xfd: add binding information for mcp251863 (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: include common CAN controller bindings (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: fix indention of table in bosch,mram-cfg description (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: list Chandrasekar Ramakrishnan as maintainer (Radu Rendec) [RHEL-90130]
  - dt-binding: can: mcp251xfd: include common CAN controller bindings (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config (Radu Rendec) [RHEL-90130]
  - dt-bindings: can-controller: add support for termination-gpios (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Document power-domains property (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Document transceiver implementation as phy (Radu Rendec) [RHEL-90130]
  - KVM: x86: Reject KVM_SET_TSC_KHZ vCPU ioctl for TSC protected guest (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Ensure unused kvm_tdx_capabilities fields are zeroed out (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: Fix unexpected unindent warning (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Don't report base TDVMCALLs (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: Fix unexpected unindent warnings (Paolo Bonzini) [RHEL-95318]
  - KVM: selftests: Add back the missing check of MONITOR/MWAIT availability (Paolo Bonzini) [RHEL-95318]
  - KVM: x86: avoid underflow when scaling TSC frequency (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Report supported optional TDVMCALLs in TDX capabilities (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Exit to userspace for SetupEventNotifyInterrupt (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Exit to userspace for GetTdVmCallInfo (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Handle TDG.VP.VMCALL<GetQuote> (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Add new TDVMCALL status code for unsupported subfuncs (Paolo Bonzini) [RHEL-95318]
  - KVM: x86/mmu: Reject direct bits in gpa passed to KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-95318]
  - KVM: x86/mmu: Embed direct bits into gpa for KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-95318]
  - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (Maxim Levitsky) [RHEL-95318]
  - KVM: TDX: Use kvm_arch_vcpu.host_debugctl to restore the host's DEBUGCTL (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: access_tracking_perf_test: Add option to skip the sanity check (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Extract guts of THP accessor to standalone sysfs helpers (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Add a nested (forced) emulation intercept test for x86 (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Actually emit forced emulation prefix for kvm_asm_safe_fep() (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Print out the actual Top-Down Slots count on failure (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Drop the "feature event" param from guest test helpers (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Remove dead code in Intel PMU counters test (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Only validate counts for hardware-supported arch events (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Make Intel arch events globally available in PMU counters test (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Use data load to trigger LLC references/misses in Intel PMU (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Fix typos in x86's PMU counter test's macro variable use (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Assert that STI blocking isn't set after event injection (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Print the seed for the guest pRNG iff it has changed (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Add global snapshot of kvm_is_forced_emulation_enabled() (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Provide an API for getting a random bool from an RNG (Maxim Levitsky) [RHEL-95318]
  - rtmutex_api: provide correct extern functions (Maxim Levitsky) [RHEL-95318]
  - KVM: arm64: use kvm_trylock_all_vcpus when locking all vCPUs (Maxim Levitsky) [RHEL-95318]
  - x86: KVM: SVM: use kvm_lock_all_vcpus instead of a custom implementation (Maxim Levitsky) [RHEL-95318]
  - KVM: add kvm_lock_all_vcpus and kvm_trylock_all_vcpus (Maxim Levitsky) [RHEL-95318]
  - locking/mutex: implement mutex_lock_killable_nest_lock (Maxim Levitsky) [RHEL-95318]
  - locking/mutex: implement mutex_trylock_nested (Maxim Levitsky) [RHEL-95318]
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Add Idle HLT intercept support (Maxim Levitsky) [RHEL-95318]
  - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept (Maxim Levitsky) [RHEL-95318]
  - KVM: SEV: Use long-term pin when registering encrypted memory regions (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Synthesize nested VM-Exit for supported emulation intercepts (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Allow the caller to provide instruction length on nested VM-Exit (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Add a #define for the architectural max instruction length (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Plumb the emulator's starting RIP into nested intercept checks (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Plumb the src/dst operand types through to .check_intercept() (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Consolidate missing X86EMUL_INTERCEPTED logic in L2 emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Emulate HLT in L2 if it's not intercepted (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Allow emulating RDPID on behalf of L2 (Maxim Levitsky) [RHEL-95318]
  - KVM: nSVM: Pass next RIP, not current RIP, for nested VM-Exit on emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Check PAUSE_EXITING, not BUS_LOCK_DETECTION, on PAUSE emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/cpuid: add type suffix to decimal const 48 fix building warning (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Clear pv_unhalted on all transitions to KVM_MP_STATE_RUNNABLE (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Introduce kvm_set_mp_state() (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Wake vCPU for PIC interrupt injection iff a valid IRQ was found (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Snapshot the host's DEBUGCTL in common x86 (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow (Maxim Levitsky) [RHEL-95318]
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU (Maxim Levitsky) [RHEL-95318]
  - KVM: Drop hack that "manually" informs lockdep of kvm->lock vs. vcpu->mutex (Maxim Levitsky) [RHEL-95318]
  - KVM: Don't BUG() the kernel if xa_insert() fails with -EBUSY (Maxim Levitsky) [RHEL-95318]
  - Revert "KVM: Fix vcpu_array[0] races" (Maxim Levitsky) [RHEL-95318]
  - KVM: Grab vcpu->mutex across installing the vCPU's fd and bumping online_vcpus (Maxim Levitsky) [RHEL-95318]
  - KVM: Verify there's at least one online vCPU when iterating over all vCPUs (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Disable AVIC on SNP-enabled system without HvInUseWrAllowed feature (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: fix canonical check of vmcs12 HOST_RIP (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: model canonical checks more precisely (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky) [RHEL-95318]
  - x86/tdx: mark tdh_vp_enter() as __flatten (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: use __always_inline for is_td_vcpu and is_td (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Revert kvm_x86_ops.mem_enc_ioctl() back to an OPTIONAL hook (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Use kvm_x86_call() instead of manual static_call() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Check that the high 32bits are clear in kvm_arch_vcpu_ioctl_run() (Paolo Bonzini) [RHEL-15711]
  - RHEL: add debugging info for TDX module initialization (Paolo Bonzini) [RHEL-15711]
  - Documentation/virt/kvm: Document on Trust Domain Extensions (TDX) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Make TDX VM type supported (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: KVM: TDX: Always honor guest PAT on TDX enabled guests (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: remove shadow_memtype_mask (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce supported_quirks to block disabling quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Allow vendor code to disable quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: do not allow re-enabling quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enable guest access to MTRR MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a method to ignore hypercall patching (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Ignore setting up mce (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore accesses to TSC (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore VMX preemption timer (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add method to ignore guest instruction emulation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore accesses to CPU state (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<GetTdVmCallInfo> hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enable guest access to LMCE related MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV rdmsr/wrmsr hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement callbacks for MSR operations (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move KVM_MAX_MCE_BANKS to header file (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV HLT hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV CPUID hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Kick off vCPUs when SEAMCALL is busy during TD page removal (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Retry locally in TDX EPT violation handler on RET_PF_RETRY (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Detect unexpected SEPT violations due to pending SPTEs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EPT violation/misconfig exit (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EXIT_REASON_OTHER_SMI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EXCEPTION_NMI and EXTERNAL_INTERRUPT (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Add a helper for NMI handling (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move emulation_required to struct vcpu_vt (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore virtual apic related operation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Force APICv active for TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enforce KVM_IRQCHIP_SPLIT for TDX guests (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Always block INIT/SIPI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle SMI request as !CONFIG_KVM_SMM (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement methods to inject NMI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Wait lapic expire when timer IRQ was injected (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Assume timer IRQ was injected if APIC state is protected (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement non-NMI interrupt injection (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move posted interrupt delivery code to common header (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Disable PI wakeup for IPIv (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add support for find pending IRQ in a protected local APIC (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV MMIO hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV port I/O hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<ReportFatalError> (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<MapGPA> (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle KVM hypercall with TDG.VP.VMCALL (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a place holder for handler of TDX hypercalls (TDG.VP.VMCALL) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a place holder to handle TDX VM exit (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move pv_unhalted check out of kvm_vcpu_has_events() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Have ____kvm_emulate_hypercall() read the GPRs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a switch_db_regs flag to handle TDX's auto-switched behavior (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Save and restore IA32_DEBUGCTL (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Disable support for TSX and WAITPKG (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: restore user ret MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Allow to update cached values in kvm_user_return_msrs w/o wrmsr (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: restore host xsave state when exit from the guest TD (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: vcpu_run: save/restore host state(host kernel gs) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement TDX vcpu enter/exit path (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move common fields of struct vcpu_{vmx,tdx} to a struct (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrapper to enter/exit TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle SEPT zap error due to page add error in premap (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Skip updating CPU dirty logging request for TDs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Make cpu_dirty_log_size a per-VM value (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add parameter "kvm" to kvm_mmu_page_ad_need_write_protect() (Paolo Bonzini) [RHEL-15711]
  - KVM: Add parameter "kvm" to kvm_cpu_dirty_log_size() and its callers (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle vCPU dissociation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Finalize VM initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add an ioctl to create initial guest memory (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Export kvm_tdp_map_page() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Bail out kvm_tdp_map_page() when VM dead (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement hook to get max mapping level of private pages (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement hooks to propagate changes of TDP MMU mirror page table (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TLB tracking for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Set per-VM shadow_mmio_value to 0 (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add setter for shadow_mmio_value (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Require TDP MMU, mmio caching and EPT A/D bits for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Set gfn_direct_bits to shared bit (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add load_mmu_pgd method for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add accessors VMX VMCS helpers (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Teach EPT violation helper about private mem (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Split out guts of EPT violation to common/exposed function (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Do not enable page track for TD guest (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Implement memslot deletion for TDX (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TD measurement of initial contents (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to remove a TD private page (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to manage TDX TLB tracking (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to add TD private pages (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrapper tdh_mem_sept_add() to add SEPT pages (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Register TDX host key IDs to cgroup misc controller (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Taking guest pa into consideration when calculate tdp level (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce KVM_TDX_GET_CPUID (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Do TDX specific vcpu initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: create/free TDX vcpu structure (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Don't offline the last cpu of one package when there's TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Make pmu_intel.c ignore guest TD case (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: add ioctl to initialize VM with TDX specific parameters (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: expose cpuid_entry2_find for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Support per-VM KVM_CAP_MAX_VCPUS extension check (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: create/destroy VM structure (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Get system-wide info about TDX module on initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add place holder for TDX VM specific mem_enc_op ioctl (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add helper functions to print TDX SEAMCALL error (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add TDX "architectural" error codes (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Define TDX architectural definitions (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add placeholders for TDX VM/vCPU structures (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Get TDX global information (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Initialize TDX during KVM module load (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Refactor VMX module init/exit functions (Paolo Bonzini) [RHEL-15711]
  - KVM: Export hardware virtualization enabling/disabling functions (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add tdx_guest_keyid_alloc/free() to alloc and free TDX guest KeyID (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Read essential global metadata for KVM (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: allocate tdx_sys_info in static memory (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX flush operations (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX VM/vCPU field access (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX page cache management (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX vCPU creation (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX TD creation (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX KeyID management (Paolo Bonzini) [RHEL-15711]
  - selftests: kvm: revamp MONITOR/MWAIT tests (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add infrastructure for secure TSC (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Push down setting vcpu.arch.user_set_tsc (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: move vm_destroy callback at end of kvm_arch_destroy_vm (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Prevent aliased memslot GFNs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Don't zap valid mirror roots in kvm_tdp_mmu_zap_all() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take root types for kvm_tdp_mmu_invalidate_all_roots() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate tearing down mirror page tables (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate building mirror page tables (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate attr_filter to MMU notifier callbacks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Support mirror root for TDP MMU (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take root in tdp_mmu_for_each_pte() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Introduce KVM MMU root types to specify page table type (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Extract root invalid check from tdx_mmu_next_root() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Support GFN direct bits (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take struct kvm in iter loops (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Make kvm_tdp_mmu_alloc_root() return void (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add an is_mirror member for union kvm_mmu_page_role (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add an external pointer to struct kvm_mmu_page (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a VM type define for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: Add member to struct kvm_gfn_range to indicate private/shared (Paolo Bonzini) [RHEL-15711]
  - x86/irq: Remove bitfields in posted interrupt descriptor (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Dedup fastpath MSR post-handling logic (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (Paolo Bonzini) [RHEL-15711]
  - KVM: nVMX: Process events on nested VM-Exit if injectable IRQ or NMI is pending (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Free vCPUs before freeing VM state (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: update amd-memory-encryption.rst references (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Modify NMI and INTR handlers to take intr_info as function argument (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Drop support for forcing UC memory when guest CR0.CD=1 (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Remove VMX support for virtualizing guest MTRR memtypes (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add fastpath handling of HLT VM-Exits (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Reorganize code in x86.c to co-locate vCPU blocking/running helpers (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Zap invalid roots with mmu_lock holding for write at uninit (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Refactor __kvm_emulate_hypercall() into a macro (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Always complete hypercall via function callback (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Bump hypercall stat prior to fully completing hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move "emulate hypercall" function declarations to x86.h (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a helper to check for user interception of KVM hypercalls (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: clear vcpu->run->hypercall.ret before exiting for KVM_EXIT_HYPERCALL (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Remove hwapic_irr_update() from kvm_x86_ops (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: don't fall through case statements without annotations (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Only advertise KVM_CAP_READONLY_MEM when supported by VM (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Disallow read-only memslots for SEV-ES and SEV-SNP (and TDX) (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Return RET_PF* instead of 1 in kvm_mmu_page_fault() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Treat TDP MMU faults as spurious if access is already allowed (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Don't overwrite shadow-present MMU SPTEs when prefaulting (Paolo Bonzini) [RHEL-15711]
  - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-104899]
  - xfs: do not check NEEDSREPAIR if ro,norecovery mount. (Pavel Reichl) [RHEL-101639]
  - iavf: fix reset_task for early reset event (Michal Schmidt) [RHEL-83572]
  - iavf: add support for Rx timestamps to hotpath (Michal Schmidt) [RHEL-83572]
  - iavf: handle set and get timestamps ops (Michal Schmidt) [RHEL-83572]
  - iavf: periodically cache PHC time (Michal Schmidt) [RHEL-83572]
  - iavf: add support for indirect access to PHC time (Michal Schmidt) [RHEL-83572]
  - iavf: add initial framework for registering PTP clock (Michal Schmidt) [RHEL-83572]
  - iavf: negotiate PTP capabilities (Michal Schmidt) [RHEL-83572]
  - iavf: Implement checking DD desc field (Michal Schmidt) [RHEL-83572]
  - iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors (Michal Schmidt) [RHEL-83572]
  - iavf: add support for negotiating flexible RXDID format (Michal Schmidt) [RHEL-83572]
  - iavf: define Rx descriptors as qwords (Michal Schmidt) [RHEL-83572]
  - iavf: allow changing VLAN state without calling PF (Michal Schmidt) [RHEL-83572]
  - iavf: Remove unused declarations (Michal Schmidt) [RHEL-83572]
  - iavf: add support to exchange qos capabilities (Michal Schmidt) [RHEL-83572]
  - iavf: Add net_shaper_ops support (Michal Schmidt) [RHEL-83572]
  - iavf: switch to Page Pool (Michal Schmidt) [RHEL-83572]
  - iavf: pack iavf_ring more efficiently (Michal Schmidt) [RHEL-83572]
  - iavf: drop page splitting and recycling (Michal Schmidt) [RHEL-83572]
  - block: use plug request list tail for one-shot backmerge attempt (Ming Lei) [RHEL-96295]
  - drm/nouveau/nvkm: introduce new GSP reply policy NVKM_GSP_RPC_REPLY_POLL (Robert Foss) [RHEL-91332]
  - drm/nouveau/nvkm: factor out current GSP RPC command policies (Robert Foss) [RHEL-91332]
  - redhat: add drm_atomic_state_test to mod-internal.list (Robert Foss) [RHEL-91332]
  - accel/ivpu: Don't convert symbol namespace to string literal (Robert Foss) [RHEL-91332]
  - xe: Don't select CONFIG_DRM_GPUSVM (Robert Foss) [RHEL-91332]
  - drm: xe: Include linux/nospec.h (Robert Foss) [RHEL-91332]
  - drm: Use old __assign_str function definition (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: Add cgroups implementation" (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux" (Robert Foss) [RHEL-91332]
  - Revert "drm/i915: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/amd/display: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/sysfs: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - drm: Move for_each_if() to util_macros.h for wider use (Robert Foss) [RHEL-91332]
  - redhat/configs: Add new configs from drm 6.15 backport (Robert Foss) [RHEL-91332]
  - Merge DRM changes from upstream v6.14..v6.15 (Robert Foss) [RHEL-91332]
  - udp: Fix memory accounting leak. (Xin Long) [RHEL-104094] {CVE-2025-22058}


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: Tao Liu <ltao@redhat.com> - 2.0.29-8
changelog:
  - kdumpctl: check and generate /etc/vconsole.conf
  - kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Evan Goode <egoode@redhat.com> - 0.69.0-16
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-95006)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.46-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: use the right distro for coverage reporting (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.47-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - feat: [1.29] Call random.seed() at begining of auto-register
    (jhnidek@redhat.com)
  - feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
  - fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Dan Horák <dhorak@redhat.com> - 4.2.3-1
changelog:
  - updated to 4.2.3 (RHEL-11415)
  - fix selfcheck in FIPS mode (RHEL-9918)
  - Resolves: RHEL-11415 RHEL-9918


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Than Ngo <than@redhat.com> - 1.1.19-5
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    Resolves: RHEL-86310


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Than Ngo <than@redhat.com> - 1.7.14-3
changelog:
  - Resolves: #2181241, lsvpd is not reporting the correct I/O microcode
    for HBA, PCIe, SAS adapters, HDD, etc


author: Than Ngo <than@redhat.com> - 1.7.14-4
changelog:
  - Related: #2181241, backport upstream patch to update update nvme_templates
    with logpage format for 0005 and 0006 versions


author: Patsy Griffin <patsy@redhat.com> - 6.04-4
changelog:
  - Activate previously added patch to improve mktime documentation and
    add 3 related upstream patches including an example.
    Related: RHEL-58342


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230516-1
changelog:
  - Update Intel CPU microcode to microcode-20230516 release (#2213124):
    - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
    - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
      to 0x2006f05;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf4 up to 0xf6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf4 up
      to 0xf8;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
      up to 0x1000171;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
      up to 0x4003501;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003303 up to 0x5003501;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
      up to 0x7002601;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
      up to 0xd000390;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
      up to 0x1000230;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
      up to 0xba;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
      to 0x33;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
      to 0x44;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
      up to 0x42a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
      to 0x58;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
      to 0x113;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
      up to 0x4112.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-1
changelog:
  - Update Intel CPU microcode to microcode-20230808 release, addresses
    CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2213124, #2223992, #2230677,
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
      to 0x2007006;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf6 up to 0xf8;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf8 up
      to 0xfa;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2
changelog:
  - Add support for the new, more correct, variant of dracut's default
    $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20231009-1
changelog:
  - Update Intel CPU microcode to microcode-20231009 release, addresses
    CVE-2023-23583:
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240531-1
changelog:
  - Update Intel CPU microcode to microcode-20240531 release, addresses
    CVE-2023-22655, CVE-2023-23583. CVE-2023-28746, CVE-2023-38575,
    CVE-2023-39368, CVE-2023-42667, CVE-2023-43490, CVE-2023-45733,
    CVE-2023-46103, CVE-2023-49141 (RHEL-30861, RHEL-30864, RHEL-30867,
    RHEL-30870, RHEL-30873, RHEL-41094, RHEL-41109):
    - Addition of 06-aa-04/0xe6 (MTL-H/U C0) microcode at revision 0x1c;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) at
      revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) at
      revision 0x4121;
    - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode at revision 0x4121;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode at revision
      0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) at revision 0x21000230;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) at revision 0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode at revision
      0x21000230;
    - Removal of 06-8f-04/0x10 microcode at revision 0x2c000290;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b0004d0;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000290;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb4 up to 0xb6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf8 up to 0xfa;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf4 up
      to 0xf8;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfa up
      to 0xfc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000181
      up to 0x1000191;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003604
      up to 0x4003605;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003604 up to 0x5003605;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002703
      up to 0x7002802;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000014 up to 0xe000015;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x38 up
      to 0x3e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003b9
      up to 0xd0003d1;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000268
      up to 0x1000290;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3e up
      to 0x42;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x22 up
      to 0x24;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc2
      up to 0xc4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x4e up
      to 0x50;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000290 up to
      0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x17 up
      to 0x19;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x32
      up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x430 up to 0x433;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x430
      up to 0x433;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x5 up
      to 0x7;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000024
      up to 0x24000026;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf8 up
      to 0xfa;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5d up
      to 0x5e;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x11d up
      to 0x123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x411c up to 0x4121;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x411c
      up to 0x4121;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x12 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
    CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58057):
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb6 up to 0xb8;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfa up to 0xfc;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfc up
      to 0x100;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20241112-1
changelog:
  - Update Intel CPU microcode to microcode-20241112 release, addresses
    CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67336):
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20250211-1
changelog:
  - Update Intel CPU microcode to microcode-20250211 release, addresses
    CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
    CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79182,
    RHEL-79186, RHEL-79187, RHEL-79242, RHEL-79243, RHEL-79246, RHEL-79251,
    RHEL-79252):
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
    - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
      revision 0x12c;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf8 up
      to 0xfa;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x100 up
      to 0x102;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
      up to 0xd0003f5;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
      up to 0x10002c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000390 up to
      0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
      up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
      to 0x9;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
      up to 0x436;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
      to 0x63;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
      to 0x12c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
      up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4123 up to 0x4124;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
      up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
      up to 0x21000291.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250512-1
changelog:
  - Add a caveat to provide ability to persistently disable SPR-EE updates
    beyond 0x2b0005c0 on systems where absence of latency spikes
    is more important than lack of the latest CVE mitigations.
  - Update Intel CPU microcode to microcode-20250512 release, addresses
    CVE-2024-28956, CVE-2025-20103, CVE-2025-20054, CVE-2024-43420,
    CVE-2025-20623, CVE-2024-45332, CVE-2025-24495, CVE-2025-20012
    (RHEL-94294, RHEL-91231, RHEL-91224, RHEL-91224, RHEL-91239)
    - Addition of 06-8f-04/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-06/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision
      0xa0000d1;
    - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision
      0x10003a2;
    - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
    - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) at revision 0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in
      intel-ucode/06-c6-02) at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision
      0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb8 up to 0xbc;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfc up to 0x100;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x102 up
      to 0x104;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003707 up to 0x5003901;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904
      up to 0x7002b01;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5
      up to 0xd000404;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0
      up to 0x10002d0;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up
      to 0x26;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6
      up to 0xca;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up
      to 0x3c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up
      to 0x56;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000620
      up to 0x2b000639;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0003e0 up to
      0x2c0003f7;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000620
      up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38
      up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x436 up to 0x437;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up
      to 0xa;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436
      up to 0x437;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up
      to 0x100;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe
      up to 0x102;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up
      to 0x64;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20
      up to 0x24;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330
      up to 0x3000341;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up
      to 0x12f;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12c up to 0x12f;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124
      up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4124 up to 0x4128;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up
      to 0x1d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000291
      up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291
      up to 0x210002a9.


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Dan Horák <dhorak@redhat.com> - 2.4.0-2
changelog:
  - engine: Only register those algos specified with default_algorithms (#2221894)
  - Resolves: #2221894


author: Dan Horák <dhorak@redhat.com> - 2.4.0-4
changelog:
  - provider: RSA: Fix get_params to retrieve max-size, bits, and security-bits (#2222878 #2224568)
  - provider: Default debug directory to /tmp but make it configurable (#2160084)
  - Resolves: #2222878 #2160084 #2224568


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Leo Sandoval <lsandova@redhat.com> - 1.77-11
changelog:
  - 90fallback: include possible kernel parameters from grub's default file
  - common.sh: do not resolve symbolic link on mapped device filesystems
  - Resolves: #RHEL-44705


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-26
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Than Ngo <than@redhat.com> - 1.3.10-6
changelog:
  - Resolves: #2166870, lparstat: Fix display of mode for dedicated-donating partition
  - Resolves: #2169269, lparstat: Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.10-7
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  Resolves: #2225371


author: Than Ngo <than@redhat.com> - 1.3.10-8
changelog:
  - Resolves: RHEL-16045, Support partial SMT level through SYS FS smt/control files
  - Resolves: RHEL-11456, LPM hooks


author: Than Ngo <than@redhat.com> - 1.3.10-9
changelog:
  - Resolves: RHEL-20350, getting larger Negative value while running rtas_dbg -l
  - Resolves: RHEL-19076, installation fails if nsid of nvme device is greater than 10
  - Resolves: RHEL-11456, add new /etc/drmgr.d/pmig hierarchy


author: Than Ngo <than@redhat.com> - 1.3.10-11
changelog:
  - Resolves: RHEL-23620, nvram help page and man page are not in sync
  - Resolves: RHEL-23619, segault when running nvram --nvram-size 268435456
  - Resolves: RHEL-23624, segault when running nvram --print-config


author: Than Ngo <than@redhat.com> - 1.3.13-1
changelog:
  - Resolves: RHEL-30880, multipath - drmgr support
  - Resolces: RHEL-61089, lparstat -E Fails to Display Correct Values for %Busy and %Idle States


author: Than Ngo <than@redhat.com> - 1.3.13-2
changelog:
  - Resolves: RHEL-80729, drmgr: return correct value
  - Resolves: RHEL-80277, lparstat: print memory mode correctly


author: Than Ngo <than@redhat.com> - 2.7.9-5
changelog:
  - man and help of diag_nvme are not in sync
  - compiler warnings
  - diag_nvme: call_home command fails on nvmf drive
  - rtas_errd: Fix core dump with large filename passed to -f option
  Resolves: RHEL-55398


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-3
changelog:
  - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
  - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Rafael Jeffman <rjeffman@redhat.com> - 2.2.1-1
changelog:
  - Rebase to version 2.2.1
    Resolves: rhbz#2088661
  - Disable DNSSEC tests using SHA1 due to crypto policies
    Resolves: rhbz#2107651


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: John Kacur <jkacur@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream python-linux-procfs-0.7.3
  - This rebase removes upstream spec files and
  - syncs the git tag with version
  Resolves: RHEL-7614


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.3.4-2
changelog:
  - Apply PR6 by Igor Raits <ignatenkobrain@fedoraproject.org>: Support
    for building on EPEL8 + upstream tests invocation.
  - Remove unused BR on python3-tidy (we'd need pytidylib instead, which
    doesn't seem to be packaged).


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.5-6
changelog:
  - Security fix for CVE-2024-37891
  - Backport upstream patch to fix TypeError for http connection if the PoolManager
  - is instantiated with server_hostname
  Resolves: RHEL-43172
  Resolves: RHEL-39285


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-52
changelog:
  - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-15051)
  - unit: always return 1 in log_kill (RHEL-78170)
  - ci: enable mkosi workflow for z-stream branches (RHEL-79977)
  - ci(mkosi): bump fedora version from 39 to 41 (RHEL-79977)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-53
changelog:
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-86891)
  - backlight: Drop support for actual_brightness (RHEL-86714)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-54
changelog:
  - unit: add conditions and deps to make oomd.socket and .service consistent (RHEL-90417)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-25516)
  - Add a set of assertion macros to tests.h (ASSERT_OK(), ASSERT_EQ(), ASSERT_GE(), ASSERT_LE()) that log the failed condition before crashing and convert test-gpt.c test file to use them (RHEL-103753)
  - Follow up with the PR #31819 (RHEL-103753)
  - Added more ASSERT macro and also make some test file to use them (RHEL-103753)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-103753)
  - test: add test case for issue #38265 (RHEL-103753)
  - test: answer 2nd mdadm --create question for compat with new version (RHEL-79977)
  - sysusers: cross-check user and group names too (RHEL-72572)
  - test-sysusers: check group creation with matching user entry (RHEL-72572)
  - user-sessions: do not remove /etc/nologin (RHEL-85467)
  - hwdb: f20 → micmute (RHEL-72697)
  - hwdb: f21 → touchpad_toggle (RHEL-72697)
  - hwdb: f22 → touchpad_on (RHEL-72697)
  - hwdb: f23 → touchpad_off (RHEL-72697)
  - hwdb: drop some now redundant mappings (RHEL-72697)
  - hwdb: Add micmute for System76 (RHEL-72697)
  - hwdb: Add newer System76 Pangolins (RHEL-72697)
  - hwdb: WALTOP International Corp. Slim Tablet Stylus (RHEL-72697)
  - hwdb: add MSI Claw 8 AT Keyboard Scancodes (#36180) (RHEL-72697)
  - Adds asus T103HAF rotation matrix to 60-sensor.hwdb (#36177) (RHEL-72697)
  - hwdb: fix screen rotation for EXO Wings 2in1 w1125 (#36283) (RHEL-72697)
  - hwdb: XBox Series Elite controller modalias entry has been added. (#36305) (RHEL-72697)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72697)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72697)
  - hwdb.d: add support for Akoya P15645 (RHEL-72697)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72697)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72697)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72697)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72697)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72697)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72697)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72697)
  - hwdb: add G-Mode key support (#37175) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72697)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72697)
  - Add emulated release to G-Mode key (RHEL-72697)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72697)
  - hwdb: add bladeRF SDR devices (RHEL-72697)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72697)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72697)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72697)
  - hwdb: say that settings can be also set to 0 (RHEL-72697)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72697)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72697)
  - hwdb: run "update-hwdb" (RHEL-72697)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72697)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72697)
  - hwdb: add Ettus Research SDR devices (RHEL-72697)
  - hwdb: add RTL-SDR devices (RHEL-72697)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72697)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72697)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72697)
  - hwdb: add support for Loupedeck devices (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72697)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72697)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72697)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72697)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72697)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72697)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - Fix Positivo K116J search key and www shortcut (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72697)
  - hwdb: several cleanups (RHEL-72697)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - hwdb: update autosuspend rules (RHEL-72697)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72697)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72697)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72697)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72697)
  - flush_ports: flush POSIX message queues properly (RHEL-90860)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install (RHEL-83932)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install.in (RHEL-83932)
  - kernel-install: do not mix || and && (RHEL-83932)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-83932)
  - cgroup: add support for memory.peak (RHEL-95797)
  - core: include peak memory in unit_log_resources() (RHEL-95797)
  - run: include peak memory in output (RHEL-95797)
  - core: ensure init.scope is realized after drop-ins have been loaded (RHEL-103488)
  - core: add possibility to not track certain unit types (RHEL-89796)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-55
changelog:
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - build: add some coloring to --version output (RHEL-100353)
  - core: output log cycle path in one log message, not many (RHEL-100353)
  - core: make log cycle messages recognizable via message IDs (RHEL-100353)
  - core: change ordering cycle log message log levels (RHEL-100353)
  - core: cast log_oom() got void (RHEL-100353)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-100353)
  - catalog: add entries for the order cycle log messages (RHEL-100353)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - core/transaction: do not attempt to log "n/a" as a journal field (RHEL-100353)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-7
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
  - Use proper SPDX license identifiers
  - Fix a test failure


author: Vladis Dronov <vdronov@redhat.com> - 6.17-1
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-64951)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-21
changelog:
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
  - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
  - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
  - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-2
changelog:
  - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70208 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73342)
  - LPAR level power consumption reporting (RHEL-72675)
  - Provide Topology-Map information to userspace (RHEL-72682)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73021)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390)
  - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.55-1
changelog:
  - Allow tuned-ppd read sssd public files
  Resolves: RHEL-69526
  - Allow systemd-journal-upload read init pid files
  Resolves: RHEL-62196
  - Label SetroubleshootPrivileged.py with setroubleshootd_exec_t
  Resolves: RHEL-77319
  - Allow chronyd-restricted sendto to chronyc
  Resolves: RHEL-82308
  - Allow chronyc sendto to chronyd-restricted
  Resolves: RHEL-82308


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.56-1
changelog:
  - Remove 3 permissive domains
  Resolves: RHEL-82674
  - Allow tuned-ppd dbus chat with xdm
  Resolves: RHEL-87203
  - Allow system-dbusd list systemd-machined directories
  Resolves: RHEL-85379
  - Allow NetworkManager create and use icmp_socket
  Resolves: RHEL-83529
  - Allow journalctl connect to systemd-userdbd over a unix socket
  Resolves: RHEL-82673
  - allow gdm and iiosensorproxy talk to each other via D-bus
  Resolves: RHEL-80697
  - Allow varnishd execute the prlimit64() syscall
  Resolves: RHEL-77995
  - Allow system_dbusd_t r/w unix stream sockets of unconfined_service_t
  Resolves: RHEL-61928
  - Add the getattr permission to 2 dontaudit interfaces
  Resolves: RHEL-59145


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.57-1
changelog:
  - Update policy for haproxyd
  Resolves: RHEL-88045
  - Allow NetworkManager manage NetworkManager_etc_rw_t symlinks
  Resolves: RHEL-86178
  - Allow lldpad connect to systemd-userdbd over a unix socket
  Resolves: RHEL-84046
  - Allow gconfd connect to system dbus
  Resolves: RHEL-77984
  - Allow login_pgm read filesystem sysctls
  Resolves: RHEL-77745
  - Allow login_userdomain create /run/tlog directory with user_tmp_t
  Resolves: RHEL-47241


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.58-1
changelog:
  - Allow mptcpd the net_admin capability
  Resolves: RHEL-81729
  - Allow networkmanager send a general signal to iptables
  Resolves: RHEL-93741
  - Make bootupd use bootupd_tmp_t as its private type for files in /tmp
  Resolves: RHEL-94508
  - Update bootupd policy
  Resolves: RHEL-94508
  - Allow switcheroo-control dbus chat with xdm
  Resolves: RHEL-93335
  - Update the files_search_mnt() interface
  Resolves: RHEL-94184


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.59-1
changelog:
  - virt: allow QEMU use of the qgs daemon for attestation
  Resolves: RHEL-87744
  - qgs: add contrib module for TDX "qgs" daemon
  Resolves: RHEL-87744
  - kernel: add interfaces for using SGX enclaves
  Resolves: RHEL-87744
  - Allow coreos-installer search sssd library directory
  Resolves: RHEL-95689
  - Label /dev/diag as diagnostic_device_t
  Resolves: RHEL-95342
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-1556


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.60-1
changelog:
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-1556
  - Update irqbalance policy for using unconfined scripts
  Resolves: RHEL-1556


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.61-1
changelog:
  - Fix incorrect /run and /usr/bin file context entries
  Resolves: SELINUX-4392
  - Dontaudit irqbalance read sssd public files
  Resolves: RHEL-1556
  - Update sssd_dontaudit_read_public_files()
  Resolves: RHEL-1556
  - Allow insights-client file transition for files in /var/tmp
  Resolves: SELINUX-4392
  - Add the virt_exec_virsh() interface
  Resolves: SELINUX-4392
  - Add the ssh_exec_sshd() interface
  Resolves: SELINUX-4392
  - Add rhsmcertd interfaces
  Resolves: SELINUX-4392
  - Add the bind_exec_named_checkconf() interface
  Resolves: SELINUX-4392
  - Add the auth_write_motd_var_run_files() interface
  Resolves: SELINUX-4392
  - Add the gpg_domtrans_agent() interface
  Resolves: SELINUX-4392
  - Add the gpg_read_user_secrets() interface
  Resolves: SELINUX-4392
  - Add policy for insights-core
  Resolves: SELINUX-4392


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.62-1
changelog:
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-59683
  - Allow systemd-timedated start/stop timemaster services
  Resolves: RHEL-95690
  - Allow lldpd connect to systemd-machined over a unix socket
  Resolves: RHEL-96167
  - Allow power-profiles-daemon get attributes of filesystems with extended attributes
  Resolves: RHEL-100718
  - Allow tuned-ppd watch_reads sysfs directories
  Resolves: RHEL-101687
  - Allow tuned-ppd watch sysfs directories
  Resolves: RHEL-101687


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.63-1
changelog:
  - Allow samba-dcerpcd send sigkills to passwd
  Resolves: RHEL-100032
  - Allow power-profiles-daemon watch sysfs directories
  Resolves: RHEL-100718
  - Allow power-profiles-daemon write sysfs files
  Resolves: RHEL-100718
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-59683
  - Allow irqbalance search sssd lib directories
  Resolves: RHEL-1556
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-59145


author: Martin Osvald <mosvald@redhat.com> - 2.13.7-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2066753)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2066767)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#2026892)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-15
changelog:
  - nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
  - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-1
changelog:
  - Update to 4.9.1 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-2
changelog:
  - Update to 4.9.1-2 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.2-1
changelog:
  - Update to 4.9.2 
    Resolves: RHEL-101717
    Resolves: RHEL-101718
    Resolves: RHEL-101719
    Resolves: RHEL-101720


author: Abhi Das <adas@redhat.com> - 4.4-9.git1
changelog:
  - CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    rhbz#2000638


author: Abhi Das <adas@redhat.com> - 4.4-10.git1
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    rhbz#2007304


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-1
changelog:
  - Rebase to v6.7; drop upstream patches on top of 5.18 (RHEL-8646).
  - Updated the SPDX license expression.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-2
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65109).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.12-1
changelog:
  - Rebase to v6.12; drop upstream patches on top of 6.7, drop the harcoded
    "-isystem /usr/include" from CPPFLAGS (RHEL-8646).


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2468
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Clemens Lang <cllang@redhat.com> - 5.71-2
changelog:
  - Speed up loading client CA list from CAfile
    Resolves: RHEL-52321
  - Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format
    Resolves: RHEL-52317


author: Jiri Hnidek <jhnidek@redhat.com> 20220608-1
changelog:
  - New package built with tito
  - Using new version pattern for subscription-manager-rhsm-certificates


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-13
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916
  - CVE-2025-32462 sudo: LPE via host option
  Resolves: RHEL-100020


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-1
changelog:
  - The patches are for SSL3 compatibility. These can probably be
    removed when upstream tboot fully implements SSL3.
  - Upgrade to latest upstream.
  - Remove trousers dependency.
    Resolves: rhbz#1922002
    Resolves: rhbz#1870520
    Resolves: rhbz#1927374


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-2
changelog:
  - Bump the NVR as a result of including the gating.yaml file in
    the git repo.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3
changelog:
  - Add the -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection and -Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  macros to assure the
    build meets RHEL security requirements.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-4
changelog:
  - From Miroslave Vadkerti:
    Onboarding tests to RHEL9 in BaseOS CI requires action, adding
    test configuration in our "dispatcher" configuration for RHEL9:
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/blob/production/brew-dispatcher-rhel9.yaml
    Test config was added for tboot in the following MR.
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/-/merge_requests/2686
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.5-1
changelog:
  - Upgrade to tboot-1.10.5-1 for fixes and updates.
  - Added a Requires line to install grub2-efi-x64-modules
  - Added a scriptlet to the tboot.spec file to automatically install
    grub2-efi-x64-modules and move them to the correct directory.
  - Removed three patches that are no longer needed.
  - Added two patches from upstream, one for a fix, the other cosemetic.
  - Resolves: rhbz#2041766
    Resolves: rhbz#2040083


author: Štěpán Horáček <shoracek@redhat.com> - 5.2-4
changelog:
  - Backport upstream fixes.
  - tpm2_checkquote: Fix check of magic number. (CVE-2024-29038)
  - tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039)
  - Fix check of magic number.
    Resolves: RHEL-23198
    Resolves: RHEL-41031
    Resolves: RHEL-41035


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Jan Macku <jamacku@redhat.com> - 3:2.1.1-1
changelog:
  - rebase to 2.1.1 (RHEL-67117)
      Interpret ipv4-mapped ipv6 addresses (::ffff:A.B.C.D) as true ipv4.

  	   There are no ipv4-mapped addresses in the real network which we
  	   operate on, so use just ipv4 in such cases, but allow users
  	   to specify it this way for convenience.

  	  Return back more robast poll(2) loop handling.


author: John Kacur <jkacur@redhat.com> - 0.19-3
changelog:
  - Don't start the gui if a display is not available
  - Change to SPDX licence tag in the specfile
  Resolves: RHEL-8859


author: John Kacur <jkacur@redhat.com> - 0.19-8
changelog:
  - Fix show_threads -t and show_irqs -q to not match everything if no match
  - Fix run command failing to apply BATCH policy
  - Add -U and -K to the move command
  Resolves: RHEL-86862 RHEL-106065 RHEL-106066


author: John B. Wyatt IV <jwyatt@redhat.com> - 0.19-9
changelog:
  - Disable cpu_power from showing in help menu and checking for cpu_power
  match functionality.
  Resolves: RHEL-107847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50568
    - spec: create /etc/tuned/profiles directory
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
      resolves: RHEL-31757
    - daemon: buffer sighup signal
      resolves: RHEL-31180
    - added an option to configure profile directories
      resolves: RHEL-26157
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
      resolves: RHEL-25613
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
      resolves: RHEL-46560
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.2.rc1
changelog:
  - fixed functions packaging and added explicit conflict with power-profiles-daemon
    related: RHEL-50568


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50568
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-2
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66638
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66615


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-70457
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
      resolves: RHEL-51760
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
      resolves: RHEL-58820
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
      resolves: RHEL-72981
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
      resolves: RHEL-60906
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - sap-hana: Set transparent_hugepages to madvise
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion
      resolves: RHEL-75773


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-2
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-26860)


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74308)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84741)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-57
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45994


author: Sérgio Basto <sergio@serjux.com> - 2.6.0-3
changelog:
  - Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Sérgio Basto <sergio@serjux.com> - 2.6.1-1
changelog:
  - Update usb_modeswitch to 2.6.1
  - Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&t=2733
  - Drop BR jimtcl-devel, if we don't install dynlink-dispatcher


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-1
changelog:
  - Rebased to upstream candidate.
  - Resolves: rhbz#1955374
  - Removed all python based tools, and all management should now be done with
    LVM.
  - Resolves: rhbz#1949159
  - vdostats is now a C program
  - Resolves: rhbz#1972302


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-1
changelog:
  - Fixed off-by-one issue in vdostats.
  - Resolves: rhbz#1999056
  - Improved error handling and path validation in vdostats.
  - Resolves: rhbz#2004576


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.360-1
changelog:
  - Fixed vdostats output issues.
  - Resolves: rhbz#2004576
  - Removed incorrect assumptions about major device numbers in vdostats.
  - Resolves: rhbz#2045885
  - Made improvements to the vdorecover script.
  - Resolves: rhbz#2047543
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#2047543


author: Than Ngo <than@redhat.com> - 2.21-30
changelog:
  - Add a check to ensure that /proc/$$/exe can be read
    thanks to mbliss@redhat.com for the report and the proposed patch
    Resolves: RHEL-101073


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-3
changelog:
  - xfsdump: restoring inventory prevents non-directory files being restored from tape,
  - actually fixed by rebase to 3.1.12
  - related: bz#2166557
  - xfsrestore: Files from the backup go to orphanage dir because of xfsdump issue
  - related: bz#2034327


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-4
changelog:
  - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x
  - Related: RHEL-8000


author: Pavel Reichl <preichl@redhat.com> - 6.3.0-1
changelog:
  - Rebase to upstream version 6.3.0
  -
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
  - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
  -
  - Rename the remaining patches so the name contains upstream version in which
  - they are implemented, or "rhelonly".
  -
  - Drop Eric Sandeen's public key used to check tarball signature and replace it by
  - Carlos Maiolino's (current upstream xfsprogs maintainer).
  -
  - Following is a list of newly backported patches from versions released after 6.3
  - which are fixing patches present in version 6.3:
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  -
  - Backport:
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  - to implement RHEL-RHEL-8284
  -
  - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
  - to implement RHEL-7900
  -
  - Related: RHEL-15399
  - Related: RHEL-8284
  - Related: RHEL-7900


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-1
changelog:
  - Rebase to a more recent upstream release
  - Related: RHEL-28339
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
  - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  -
  - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
  -	version it was merged in.


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-2
changelog:
  - Fix various CVE issues.
  - Related: RHEL-32996
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
  - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-3
changelog:
  - Fix coverity issue
  - Related: RHEL-39449
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-7
changelog:
  - xfs unrepairable filesystem if directory block not junked in phase 3 - more
  - fixes
  - Related: RHEL-54342


author: Jakub Martisko <jamartis@redhat.com> - 3.0-31
changelog:
  - Add the missing linker flags
  - Add the patch that allows to configure the linker flags from the spec file
    Resolves: rhbz #2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-33
changelog:
  - Disable the asm implementation of some functions and use the C instead
  - This should fix some of the annocheck issues
    Related: rhbz#2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-34
changelog:
  - Fix the regression introduced in 3.0-33 that caused some of the zip build flags to be dropped
  Resolves: rhbz#2162688


author: Jakub Martisko <jamartis@redhat.com> - 3.0-35
changelog:
  - Fix the annocheck issus from 3-0-33 without reintroducing the regression from 3.0-34
  Related: rhbz#2162688


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


