# changelog

author: Augusto Caringi <acaringi@redhat.com> [5.14.0-579.el9]
changelog:
  - selftest/mm: va_high_addr_switch: add ppc64 support check (Li Wang) [RHEL-85318]
  - selftests/mm: va_high_addr_switch: reduce test noise (Li Wang) [RHEL-85318]
  - redhat: spec: fix "unexpected argument to non-parametric macro" warnings (Augusto Caringi)
  - perf test: Parse 'perf stat' Topdown events for aarch64 (Anubhav Shelat) [RHEL-78426]
  - powerpc/pseries: make max polling consistent for longer H_CALLs (Mamatha Inamdar) [RHEL-79919]
  - Fix mmu notifiers for range-based invalidates (Charles Mirabile) [RHEL-83459]
  - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (Jared Kangas) [RHEL-84805] {CVE-2024-58068}
  - OPP: add index check to assert to avoid buffer overflow in _read_freq() (Jared Kangas) [RHEL-81432] {CVE-2024-57998}
  - OPP: Add dev_pm_opp_find_freq_exact_indexed() (Jared Kangas) [RHEL-81432]
  - s390/diag: Move diag.c to diag specific folder (Mete Durlu) [RHEL-72676]
  - s390/diag324: Retrieve power readings via diag 0x324 (Mete Durlu) [RHEL-72676]
  - s390/diag: Create misc device /dev/diag (Mete Durlu) [RHEL-72676]
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CKI Backport Bot) [RHEL-81064] {CVE-2024-54456}
  - mei: me: add panther lake P DID (David Arcari) [RHEL-79720]
  - block: fix adding folio to bio (Gavin Shan) [RHEL-79410]
  - x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally (David Arcari) [RHEL-53784]
  - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly (David Arcari) [RHEL-53784]
  - x86/itmt: Move the "sched_itmt_enabled" sysctl to debugfs (David Arcari) [RHEL-53784]
  - x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD (David Arcari) [RHEL-53784]
  - x86/itmt: Use guard() for itmt_update_mutex (David Arcari) [RHEL-53784]
  - x86/itmt: Convert "sysctl_sched_itmt_enabled" to boolean (David Arcari) [RHEL-53784]
  - perf tools: Fix build-id event recording (Michael Petlan) [RHEL-83537]
  - powerpc/rtas: avoid scheduling in rtas_os_term() (Mamatha Inamdar) [RHEL-81040]
  - ice: ensure periodic output start time is in the future (Petr Oros) [RHEL-29207]
  - ice: fix PHY Clock Recovery availability check (Petr Oros) [RHEL-29207]
  - ice: Drop auxbus use for PTP to finalize ice_adapter move (Petr Oros) [RHEL-29207]
  - ice: Use ice_adapter for PTP shared data instead of auxdev (Petr Oros) [RHEL-29207]
  - ice: Initial support for E825C hardware in ice_adapter (Petr Oros) [RHEL-29207]
  - ice: Add ice_get_ctrl_ptp() wrapper to simplify the code (Petr Oros) [RHEL-29207]
  - ice: Introduce ice_get_phy_model() wrapper (Petr Oros) [RHEL-29207]
  - ice: Enable 1PPS out from CGU for E825C products (Petr Oros) [RHEL-29207]
  - ice: Read SDP section from NVM for pin definitions (Petr Oros) [RHEL-29207]
  - ice: Disable shared pin on E810 on setfunc (Petr Oros) [RHEL-29207]
  - ice: Cache perout/extts requests and check flags (Petr Oros) [RHEL-29207]
  - ice: Align E810T GPIO to other products (Petr Oros) [RHEL-29207]
  - ice: Add SDPs support for E825C (Petr Oros) [RHEL-29207]
  - ice: Implement ice_ptp_pin_desc (Petr Oros) [RHEL-29207]
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CKI Backport Bot) [RHEL-82456] {CVE-2024-58069}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-580.el9]
changelog:
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CKI Backport Bot) [RHEL-80054] {CVE-2025-21702}
  - netfilter: nft_exthdr: fix offset with ipv4_find_option() (Florian Westphal) [RHEL-84577]
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Florian Westphal) [RHEL-84577]
  - netfilter: nf_tables: make destruction work queue pernet (Florian Westphal) [RHEL-84577]
  - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template. (Florian Westphal) [RHEL-84577]
  - netfilter: nft_flow_offload: update tcp state flags under lock (Florian Westphal) [RHEL-84577]
  - netfilter: nft_flow_offload: clear tcp MAXACK flag before moving to slowpath (Florian Westphal) [RHEL-84577]
  - bonding: fix incorrect MAC address setting to receive NS messages (Hangbin Liu) [RHEL-84574]
  - bonding: report duplicate MAC address in all situations (Hangbin Liu) [RHEL-84574]
  - bonding: delete always true device check (Hangbin Liu) [RHEL-84574]
  - bonding: add ns target multicast address to slave device (Hangbin Liu) [RHEL-84574]
  - bonding: Pass string literal as format argument of alloc_ordered_workqueue() (Hangbin Liu) [RHEL-84574]
  - scsi: lpfc: Fix spelling mistake 'Toplogy' -> 'Topology' (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Copyright updates for 14.4.0.8 patches (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update lpfc version to 14.4.0.8 (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Reduce log message generation during ELS ring clean up (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Copyright updates for 14.4.0.7 patches (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update lpfc version to 14.4.0.7 (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Add support for large fw object application layer reads (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Update definition of firmware configuration mbox cmds (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (Dick Kennedy) [RHEL-82146]
  - scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (Dick Kennedy) [RHEL-82146]
  - selftests: net: local_termination: require mausezahn (Hangbin Liu) [RHEL-84591]
  - selftests: forwarding: add a pvid_change test to bridge_vlan_unaware (Hangbin Liu) [RHEL-84591]
  - selftests: tls: add a selftest for wrapping rec_seq (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Test TOS matching with input routes (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add negative connect tests (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add negative match tests (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Clarify test results (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Remove unused functions (Hangbin Liu) [RHEL-84591]
  - selftests: make order checking verbose in msg_zerocopy selftest (Hangbin Liu) [RHEL-84591]
  - selftests: fix OOM in msg_zerocopy selftest (Hangbin Liu) [RHEL-84591]
  - selftests: fib_rule_tests: Add VRF tests (Hangbin Liu) [RHEL-84591]
  - vxlan: check vxlan_vnigroup_init() return value (CKI Backport Bot) [RHEL-81516] {CVE-2025-21790}
  - media: mc: fix endpoint iteration (Kate Hsuan) [RHEL-77308]
  - media: fix secfeed undefined when filter alloc fail (Kate Hsuan) [RHEL-77308]
  - media: docs: Remove extraneous \endgroup from P010 table (Kate Hsuan) [RHEL-77308]
  - media: Fix building pdfdocs (Kate Hsuan) [RHEL-77308]
  - media: Documentation: mc: Replace deprecated graph walk API (Kate Hsuan) [RHEL-77308]
  - media: v4l2-mc: Mark v4l2_pipeline_link_notify() as deprecated (Kate Hsuan) [RHEL-77308]
  - media: videobuf2: Drop minimum allocation requirement of 2 buffers (Kate Hsuan) [RHEL-77308]
  - media: cec.h: Fix kerneldoc (Kate Hsuan) [RHEL-77308]
  - ipv6: use RCU protection in ip6_default_advmss() (Guillaume Nault) [RHEL-81568] {CVE-2025-21765}
  - net: add dev_net_rcu() helper (Guillaume Nault) [RHEL-81568] {CVE-2025-21765}
  - iomap: elide flush from partial eof zero range (Brian Foster) [RHEL-7901]
  - iomap: lift zeroed mapping handling into iomap_zero_range() (Brian Foster) [RHEL-7901]
  - iomap: reset per-iter state on non-error iter advances (Brian Foster) [RHEL-7901]
  - iomap: make zero range flush conditional on unwritten mappings (Brian Foster) [RHEL-7901]
  - iomap: fix handling of dirty folios over unwritten extents (Brian Foster) [RHEL-7901]
  - ima: Fix potential memory leak in ima_init_crypto() (CKI Backport Bot) [RHEL-80844] {CVE-2022-49627}
  - dm-crypt: Document integrity_key_size option. (Benjamin Marzinski) [RHEL-84906]
  - dm zoned: dynamically allocate the dm-zoned-meta shrinker (Benjamin Marzinski) [RHEL-84906]
  - dm: dynamically allocate the dm-bufio shrinker (Benjamin Marzinski) [RHEL-84906]
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: Do not emit journal configuration in DM table for Inline mode (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: Avoid divide by zero in table status in Inline mode (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: track tag_offset in convert_context (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: don't initialize cc_sector again (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: use bi_sector in bio when initialize integrity seed (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: fully initialize clone->bi_iter in crypt_alloc_buffer() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: set atomic as false when calling crypt_convert() in kworker (Benjamin Marzinski) [RHEL-84906]
  - dm-mirror: Support atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm-io: Warn on creating multiple atomic write bios for a region (Benjamin Marzinski) [RHEL-84906]
  - dm-stripe: Enable atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm-linear: Enable atomic writes (Benjamin Marzinski) [RHEL-84906]
  - dm: Ensure cloned bio is same length for atomic write (Benjamin Marzinski) [RHEL-84906]
  - dm-table: atomic writes support (Benjamin Marzinski) [RHEL-84906]
  - dm-transaction-manager: use red-black trees instead of linear lists (Benjamin Marzinski) [RHEL-84906]
  - dm: disable REQ_NOWAIT for flushes (Benjamin Marzinski) [RHEL-84906]
  - dm: remove useless test in alloc_multiple_bios (Benjamin Marzinski) [RHEL-84906]
  - dm: change kzalloc to kcalloc (Benjamin Marzinski) [RHEL-84906]
  - dm raid: fix spelling errors in raid_ctr() (Benjamin Marzinski) [RHEL-84906]
  - dm thin: make get_first_thin use rcu-safe list first function (Benjamin Marzinski) [RHEL-84906]
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-84906]
  - dm-verity FEC: Avoid copying RS parity bytes twice. (Benjamin Marzinski) [RHEL-84906]
  - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2) (Benjamin Marzinski) [RHEL-84906]
  - dm array: fix cursor index when skipping across block boundaries (Benjamin Marzinski) [RHEL-84906]
  - dm array: fix unreleased btree blocks on closing a faulty array cursor (Benjamin Marzinski) [RHEL-84906]
  - dm-verity: remove the unused "data_start" variable (Benjamin Marzinski) [RHEL-84906]
  - dm-bufio: use kmalloc to allocate power-of-two sized buffers (Benjamin Marzinski) [RHEL-84906]
  - dm thin: Add missing destroy_work_on_stack() (Benjamin Marzinski) [RHEL-84906]
  - dm: add support for get_unique_id (Benjamin Marzinski) [RHEL-84906]
  - dm: Fix typo in error message (Benjamin Marzinski) [RHEL-84906]
  - dm ioctl: rate limit a couple of ioctl based error messages (Benjamin Marzinski) [RHEL-84906]
  - dm: zoned: Remove unused functions (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused dm_table_bio_based (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused dm_set_md_type (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused functions in bio-prison-v1 (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused dm_cache_size (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused dm_cache_dump (Benjamin Marzinski) [RHEL-84906]
  - dm cache: Remove unused btracker_nr_writebacks_queued (Benjamin Marzinski) [RHEL-84906]
  - dm-cache: fix warnings about duplicate slab caches (Benjamin Marzinski) [RHEL-84906]
  - dm-bufio: fix warnings about duplicate slab caches (Benjamin Marzinski) [RHEL-84906]
  - dm verity: fallback to platform keyring also if key in trusted keyring is rejected (Benjamin Marzinski) [RHEL-84906]
  - dm: fix spelling errors (Benjamin Marzinski) [RHEL-84906]
  - dm-cache: remove pointless error check (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Use common error handling code in crypt_set_keyring_key() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Use up_read() together with key_put() only once in crypt_set_keyring_key() (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: check mac_size against HASH_MAX_DIGESTSIZE in sb_mac() (Benjamin Marzinski) [RHEL-84906]
  - dm-integrity: support recalculation in the 'I' mode (Benjamin Marzinski) [RHEL-40616]
  - dm integrity: Convert comma to semicolon (Benjamin Marzinski) [RHEL-84906]
  - dm: Make use of __assign_bit() API (Benjamin Marzinski) [RHEL-84906]
  - dm integrity: Remove extra unlikely helper (Benjamin Marzinski) [RHEL-84906]
  - dm: Convert to use ERR_CAST() (Benjamin Marzinski) [RHEL-84906]
  - dm bufio: Remove NULL check of list_entry() (Benjamin Marzinski) [RHEL-84906]
  - dm-crypt: Allow to specify the integrity key size as option (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused declaration and empty definition "dm_zone_map_bio" (Benjamin Marzinski) [RHEL-84906]
  - dm delay: enhance kernel documentation (Benjamin Marzinski) [RHEL-84906]
  - dm: Remove unused declaration dm_get_rq_mapinfo() (Benjamin Marzinski) [RHEL-84906]
  - platform/x86/intel/pmc: Remove unneeded extern keyword in header (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove unnecessary declarations in header (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Add Panther Lake support to intel_pmc_core (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Move arch specific action to init function (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Add Arrow Lake U/H support to intel_pmc_core driver (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove simple init functions (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Create generic_core_init() for all platforms (David Arcari) [RHEL-20138]
  - platform/x86/intel/pmc: Remove duplicate enum (David Arcari) [RHEL-20138]
  - platform/x86:intel/pmc: Make tgl_core_generic_init() static (David Arcari) [RHEL-20138]
  - net: fix NULL pointer dereference in l3mdev_l3_rcv (Davide Caratti) [RHEL-84583]
  - ipvlan: ensure network headers are in skb linear part (Davide Caratti) [RHEL-84583] {CVE-2025-21891}
  - vxlan: Fix uninit-value in vxlan_vnifilter_dump() (Guillaume Nault) [RHEL-84588]
  - redhat/configs: Enable CONFIG_PROVE_RAW_LOCK_NESTING for debug kernel (Waiman Long) [RHEL-80386]
  - locking/lockdep: Enforce PROVE_RAW_LOCK_NESTING only if ARCH_SUPPORTS_RT (Waiman Long) [RHEL-80386]
  - lockdep: Enable PROVE_RAW_LOCK_NESTING with PROVE_LOCKING. (Waiman Long) [RHEL-80386]
  - mpls: Handle error of rtnl_register_module(). (Guillaume Nault) [RHEL-85646]
  - ppp: Fix KMSAN uninit-value warning with bpf (Guillaume Nault) [RHEL-85638]
  - vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson) [RHEL-45755 RHEL-85593]
  - vfio/type1: Use mapping page mask for pfnmaps (Alex Williamson) [RHEL-85593]
  - mm: Provide address mask in struct follow_pfnmap_args (Alex Williamson) [RHEL-85593]
  - vfio/type1: Use consistent types for page counts (Alex Williamson) [RHEL-85593]
  - vfio/type1: Use vfio_batch for vaddr_get_pfns() (Alex Williamson) [RHEL-85593]
  - vfio/type1: Convert all vaddr_get_pfns() callers to use vfio_batch (Alex Williamson) [RHEL-85593]
  - vfio/type1: Catch zero from pin_user_pages_remote() (Alex Williamson) [RHEL-85593]
  - vfio/pci: match IGD devices in display controller class (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Add GB200 SKU to the devid table (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Check the HBM training and C2C link status (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem (Alex Williamson) [RHEL-85593]
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [RHEL-85593]
  - vfio/pci: Expose setup ROM at ROM bar when needed (Alex Williamson) [RHEL-85593]
  - vfio/pci: Remove shadow ROM specific code paths (Alex Williamson) [RHEL-85593]
  - vfio/pci: Remove #ifdef iowrite64 and #ifdef ioread64 (Alex Williamson) [RHEL-85593]
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Alex Williamson) [RHEL-85593]
  - vfio/nvgrace-gpu: Add a new GH200 SKU to the devid table (Alex Williamson) [RHEL-85593]
  - kvm/vfio: Constify struct kvm_device_ops (Alex Williamson) [RHEL-85593]
  - vfio/qat: fix overflow check in qat_vf_resume_write() (Alex Williamson) [RHEL-85593]
  - redhat/configs: Disable CONFIG_QAT_VFIO_PCI (Alex Williamson) [RHEL-85593]
  - vfio/qat: Add vfio_pci driver for Intel QAT SR-IOV VF devices (Alex Williamson) [RHEL-85593]
  - redhat/configs: disable CONFIG_DRM_WERROR (Eric Chanudet) [RHEL-82507]
  - Revert "nvme_core: scan namespaces asynchronously" (John Meneghini) [RHEL-84361]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-581.el9]
changelog:
  - selftests: livepatch: handle PRINTK_CALLER in check_result() (Denis Aleksandrov) [RHEL-85303]
  - livepatch: convert timeouts to secs_to_jiffies() (Denis Aleksandrov) [RHEL-85303]
  - selftests: livepatch: add test cases of stack_order sysfs interface (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Add stack_order sysfs attribute (Denis Aleksandrov) [RHEL-85303]
  - selftests/livepatch: Replace hardcoded module name with variable in test-callbacks.sh (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Use kallsyms_on_each_match_symbol() to improve performance (Denis Aleksandrov) [RHEL-85303]
  - livepatch: Fix build failure on 32 bits processors (Denis Aleksandrov) [RHEL-85303]
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (Rafael Aquini) [RHEL-83249 RHEL-84184] {CVE-2025-21861}
  - mm: migrate_device: use more folio in migrate_device_finalize() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: use more folio in migrate_device_unmap() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: convert try_to_migrate() to folios (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: use a folio in migrate_device_range() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm: migrate_device: convert to migrate_device_coherent_folio() (Rafael Aquini) [RHEL-83249 RHEL-84184]
  - mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio (Rafael Aquini) [RHEL-84184]
  - mm: clear uffd-wp PTE/PMD state on mremap() (Rafael Aquini) [RHEL-80529 RHEL-84184] {CVE-2025-21696}
  - userfaultfd: move userfaultfd_ctx struct to header file (Rafael Aquini) [RHEL-80529 RHEL-84184]
  - mm: remove "prot" parameter from move_pte() (Rafael Aquini) [RHEL-80529 RHEL-84184]
  - mm: open-code page_folio() in dump_page() (Rafael Aquini) [RHEL-84184]
  - mm: open-code PageTail in folio_flags() and const_folio_flags() (Rafael Aquini) [RHEL-84184]
  - mm/compaction: fix UBSAN shift-out-of-bounds warning (Rafael Aquini) [RHEL-84184] {CVE-2025-21815}
  - mm: fix crashes from deferred split racing folio migration (Rafael Aquini) [RHEL-84184] {CVE-2024-42234}
  - mm: memcg: fix split queue list crash when large folio migration (Rafael Aquini) [RHEL-84184]
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT (Rafael Aquini) [RHEL-84184]
  - mm: shmem: remove unnecessary warning in shmem_writepage() (Rafael Aquini) [RHEL-84184]
  - mm/migrate: fix deadlock in migrate_pages_batch() on large folios (Rafael Aquini) [RHEL-84184]
  - mm/mglru: reset page lru tier bits when activating (Rafael Aquini) [RHEL-84184]
  - mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma (Rafael Aquini) [RHEL-84184]
  - mm: kmemleak: fix upper boundary check for physical address objects (Rafael Aquini) [RHEL-84184]
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment (Rafael Aquini) [RHEL-84184]
  - mm, madvise: fix potential workingset node list_lru leaks (Rafael Aquini) [RHEL-84184]
  - mm: move mapping_set_update out of <linux/swap.h> (Rafael Aquini) [RHEL-84184]
  - mm/migrate: fix shmem xarray update during migration (Rafael Aquini) [RHEL-84184]
  - memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled. (Rafael Aquini) [RHEL-84184]
  - memory tiering: read last_cpupid correctly in do_huge_pmd_numa_page() (Rafael Aquini) [RHEL-84184]
  - nommu: pass NULL argument to vma_iter_prealloc() (Rafael Aquini) [RHEL-84184] {CVE-2024-53109}
  - cachestat: fix page cache statistics permission checking (Rafael Aquini) [RHEL-78989 RHEL-84184] {CVE-2025-21691}
  - kernel: be more careful about dup_mmap() failures and uprobe registering (Rafael Aquini) [RHEL-84184] {CVE-2025-21709}
  - fork: avoid inappropriate uprobe access to invalid mm (Rafael Aquini) [RHEL-84184]
  - s390/pageattr: Implement missing kernel_page_present() (Rafael Aquini) [RHEL-84184]
  - x86/mm: further clarify switch_mm_irqs_off() documentation (Rafael Aquini) [RHEL-84184]
  - x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware hypervisors (Rafael Aquini) [RHEL-84184]
  - x86/kvm: Fix SEV check in sev_map_percpu_data() (Rafael Aquini) [RHEL-84184]
  - um: Fix the declaration of kasan_map_memory (Rafael Aquini) [RHEL-84184]
  - of: reserved-memory: Do not make kmemleak ignore freed address (Rafael Aquini) [RHEL-84184]
  - scripts/gdb: redefine MAX_ORDER sanely (Rafael Aquini) [RHEL-84184]
  - kasan: don't call find_vm_area() in a PREEMPT_RT kernel (Rafael Aquini) [RHEL-84184]
  - kasan: fix typo in kasan_poison_new_object documentation (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs-schemes: handle tried region directory allocation failure (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: avoid divide-by-zero during monitoring results update (Rafael Aquini) [RHEL-84184]
  - mm/damon/lru_sort: fix quota status loss due to online tunings (Rafael Aquini) [RHEL-84184]
  - mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon/reclaim: fix quota stauts loss due to online tunings (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: check error from damon_sysfs_update_target() (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: update monitoring target regions for online input commit (Rafael Aquini) [RHEL-84184]
  - mm/damon/sysfs: remove requested targets when online-commit inputs (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix damon_test_ops_registration() for DAMON_VADDR unset case (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: test only vaddr case on ops registration test (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix memory leak in damon_new_ctx() (Rafael Aquini) [RHEL-84184]
  - mm/damon/dbgfs-test: skip dbgfs_set_init_regions() test if PADDR is not registered (Rafael Aquini) [RHEL-84184]
  - mm/damon/dbgfs-test: skip dbgfs_set_targets() test if PADDR is not registered (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: make damon_start() waits until kdamond_fn() starts (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: use number of passed access sampling as a timer (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: fix return value from damos_wmark_metric_value (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: remove unnecessary si_meminfo invoke. (Rafael Aquini) [RHEL-84184]
  - mm/damon/ops-common: avoid divide-by-zero during region hotness calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon: implement a function for max nr_accesses safe calculation (Rafael Aquini) [RHEL-84184]
  - mm/damon/vaddr: change asm-generic/mman-common.h to linux/mman.h (Rafael Aquini) [RHEL-84184]
  - mm/damon/tests/dbgfs-kunit: fix the header double inclusion guarding ifdef comment (Rafael Aquini) [RHEL-84184]
  - mm/damon: fix sparse warning for zero initializer (Rafael Aquini) [RHEL-84184]
  - mm/damon/tests/vaddr-kunit: init maple tree without MT_FLAGS_LOCK_EXTERN (Rafael Aquini) [RHEL-84184]
  - mm/damon/core-test: fix memory leak in damon_new_region() (Rafael Aquini) [RHEL-84184]
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Rafael Aquini) [RHEL-84184]
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet (Rafael Aquini) [RHEL-84184]
  - ptp: Properly handle compat ioctls (Hangbin Liu) [RHEL-85028]
  - ptp: Ensure info->enable callback is always set (Hangbin Liu) [RHEL-85028] {CVE-2025-21814}
  - ptp: fix integer overflow in max_vclocks_store (Hangbin Liu) [RHEL-85028]
  - ptp: make ptp_class constant (Hangbin Liu) [RHEL-85028]
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [RHEL-33329] {CVE-2025-21926}
  - bdev: use bdev_io_min() for statx block size (Ming Lei) [RHEL-88002]
  - lib/iov_iter: fix import_iovec_ubuf iovec management (Ming Lei) [RHEL-87739]
  - iov_iter: Mark copy_iovec_from_user() noclone (Ming Lei) [RHEL-87739]
  - iov_iter: Mark copy_compat_iovec_from_user() noinline (Ming Lei) [RHEL-87739]
  - iov_iter: import single vector iovecs as ITER_UBUF (Ming Lei) [RHEL-87739]
  - iov_iter: convert import_single_range() to ITER_UBUF (Ming Lei) [RHEL-87739]
  - iov_iter: set nr_segs = 1 for ITER_UBUF (Ming Lei) [RHEL-87739]
  - redhat: Remove kernel-rt-kvm package (Wander Lairson Costa) [RHEL-76757]
  - NFS: O_DIRECT writes must check and adjust the file length (Benjamin Coddington) [RHEL-87767]
  - pnfs/flexfiles: retry getting layout segment for reads (Benjamin Coddington) [RHEL-87767]
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Benjamin Coddington) [RHEL-87767]
  - s390/diag: Add memory topology information via diag310 (Mete Durlu) [RHEL-72683]
  - net: let net.core.dev_weight always be non-zero (CKI Backport Bot) [RHEL-81686] {CVE-2025-21806}
  - sched: Fix stop_one_cpu_nowait() vs hotplug (Luis Claudio R. Goncalves) [RHEL-84526]
  - x86/tdx: Fix "in-kernel MMIO" check (Vitaly Kuznetsov) [RHEL-63318] {CVE-2024-47727}
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Desnes Nunes) [RHEL-78828 RHEL-81547] {CVE-2024-57981}
  - usb: xhci: Fix host controllers "dying" after suspend and resume (Desnes Nunes) [RHEL-78828]
  - acpi: typec: ucsi: Introduce a ->poll_cci method (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: make yoga_c630_ucsi_ops be static (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Fix deadlock during uvc_probe (Desnes Nunes) [RHEL-78828] {CVE-2024-58059}
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID" (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use (Desnes Nunes) [RHEL-78828] {CVE-2024-58079}
  - media: uvcvideo: Reorder uvc_status_init() (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Neoway N723-EA support (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MeiG Smart SRM815 (Desnes Nunes) [RHEL-78828]
  - USB: serial: cp210x: add Phoenix Contact UPS Device (Desnes Nunes) [RHEL-78828]
  - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (Desnes Nunes) [RHEL-78828]
  - usb-storage: Add max sectors quirk for Nokia 208 (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Desnes Nunes) [RHEL-78828]
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Desnes Nunes) [RHEL-78828]
  - USB: core: Disable LPM only for non-suspended ports (Desnes Nunes) [RHEL-78828]
  - usb: fix reference leak in usb_new_device() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpci: fix NULL pointer issue on shared irq case (Desnes Nunes) [RHEL-78828] {CVE-2024-57914}
  - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe() (Desnes Nunes) [RHEL-78828]
  - USB: usblp: return error when setting unsupported protocol (Desnes Nunes) [RHEL-78828]
  - usb: host: xhci-plat: set skip_phy_initialization if software node has XHCI_SKIP_PHY_INIT property (Desnes Nunes) [RHEL-78828]
  - usb: xhci: fix ring expansion regression in 6.13-rc1 (Desnes Nunes) [RHEL-78828]
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Improve redrive mode handling (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MediaTek T7XX compositions (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add MeiG Smart SLM770A (Desnes Nunes) [RHEL-78828]
  - USB: serial: option: add TCL IK512 MBIM & ECM (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Don't display nvm_version unless upgrade supported (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Add support for Intel Panther Lake-M/P (Desnes Nunes) [RHEL-47432 RHEL-78828]
  - usb: typec: ucsi: Fix connector status writing past buffer size (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Fix completion notifications (Desnes Nunes) [RHEL-78828]
  - usb: misc: onboard_usb_dev: skip suspend/resume sequence for USB5744 SMBus support (Desnes Nunes) [RHEL-78828]
  - usb: core: hcd: only check primary hcd skip_phy_initialization (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: imx8mp: fix software node kernel dump (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: imx8mq-usb: correct reference to usb-switch.yaml (Desnes Nunes) [RHEL-78828]
  - usb: ehci-hcd: fix call balance of clocks handling routines (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: Add support for sink-bc12-completion-time-ms DT property (Desnes Nunes) [RHEL-78828]
  - dt-bindings: connector: Add time property for Sink BC12 detection completion (Desnes Nunes) [RHEL-78828]
  - USB: make to_usb_device_driver() use container_of_const() (Desnes Nunes) [RHEL-78828]
  - USB: make to_usb_driver() use container_of_const() (Desnes Nunes) [RHEL-78828]
  - USB: properly lock dynamic id list when showing an id (Desnes Nunes) [RHEL-78828]
  - USB: make single lock for all usb dynamic id lists (Desnes Nunes) [RHEL-78828]
  - drivers/usb/storage: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/serial: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/musb: refactor min/max with min_t/max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/mon: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/misc: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/host: refactor min/max with min_t/max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/core: refactor max with max_t (Desnes Nunes) [RHEL-78828]
  - drivers/usb/gadget: refactor min with min_t (Desnes Nunes) [RHEL-78828]
  - usb: cdns3: Synchronise PCI IDs via common data base (Desnes Nunes) [RHEL-78828]
  - sub: cdns3: Use predefined PCI vendor ID constant (Desnes Nunes) [RHEL-78828]
  - sub: cdns2: Use predefined PCI vendor ID constant (Desnes Nunes) [RHEL-78828]
  - redhat/configs: Adding CONFIG_USB_CDNS2_UDC (Desnes Nunes) [RHEL-78828]
  - usb: cdns2: Add main part of Cadence USBHS driver (Desnes Nunes) [RHEL-78828]
  - usb: cdns2: Device side header file for CDNS2 driver (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: core: Set force_gen1 bit for all applicable SuperSpeed ports (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: gadget: Refine the logic for resizing Tx FIFOs (Desnes Nunes) [RHEL-78828]
  - USB: core: remove dead code in do_proc_bulk() (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: imx: add imx8ulp support (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Fix a missing bits to bytes conversion in ucsi_init() (Desnes Nunes) [RHEL-78828]
  - USB: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Replace deprecated PCI functions (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Convert connector specific commands to bitmaps (Desnes Nunes) [RHEL-78828]
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Desnes Nunes) [RHEL-78828]
  - USB: serial: pl2303: account for deficits of clones (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Limit Stop Endpoint retries (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove irrelevant comment (Desnes Nunes) [RHEL-78828]
  - usb: xhci: add help function xhci_dequeue_td() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: refactor xhci_td_cleanup() to return void (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove unused arguments from td_to_noop() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: improve xhci_clear_command_ring() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: request MSI/-X according to requested amount (Desnes Nunes) [RHEL-78828]
  - usb: xhci: move link TRB quirk to xhci_gen_setup() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: simplify TDs start and end naming scheme in struct 'xhci_td' (Desnes Nunes) [RHEL-78828]
  - xhci: pci: Fix indentation in the PCI device ID definitions (Desnes Nunes) [RHEL-78828]
  - xhci: pci: Use standard pattern for device IDs (Desnes Nunes) [RHEL-78828]
  - xhci: Don't perform Soft Retry for Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Fix control transfer error on Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Don't issue Reset Device command to Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - xhci: Combine two if statements for Etron xHCI host (Desnes Nunes) [RHEL-78828]
  - usb: xhci: add xhci_initialize_ring_segments() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: rework xhci_link_segments() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: refactor xhci_link_rings() to use source and destination rings (Desnes Nunes) [RHEL-78828]
  - usb: xhci: rework xhci_free_segments_for_ring() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: adjust xhci_alloc_segments_for_ring() arguments (Desnes Nunes) [RHEL-78828]
  - usb: xhci: remove option to change a default ring's TRB cycle bit (Desnes Nunes) [RHEL-78828]
  - usb: xhci: introduce macro for ring segment list iteration (Desnes Nunes) [RHEL-78828]
  - xhci: debugfs: Add virt endpoint state to xhci debugfs (Desnes Nunes) [RHEL-78828]
  - xhci: trace stream context at Set TR Deq command completion (Desnes Nunes) [RHEL-78828]
  - xhci: add stream context tracing (Desnes Nunes) [RHEL-78828]
  - xhci: Don't trace ring at every enqueue or dequeue increase (Desnes Nunes) [RHEL-78828]
  - xhci: show DMA address of TRB when tracing TRBs (Desnes Nunes) [RHEL-78828]
  - xhci: Cleanup Candence controller PCI device and vendor ID usage (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Fix sum_trb_lengths() (Desnes Nunes) [RHEL-78828]
  - usb: xhci: Remove unused parameters of next_trb() (Desnes Nunes) [RHEL-78828]
  - xhci: Add Isochronous TRB fields to TRB tracer (Desnes Nunes) [RHEL-78828]
  - phy: tegra: xusb: Set fwnode for xusb port devices (Desnes Nunes) [RHEL-78828]
  - usb: Use (of|device)_property_present() for non-boolean properties (Desnes Nunes) [RHEL-78828]
  - misc: rtsx: Cleanup on DRV_NAME cardreader variables (Desnes Nunes) [RHEL-78828]
  - usb: use "prompt" instead of "bool" for choice prompts (Desnes Nunes) [RHEL-78828]
  - redhat/configs: Adding CONFIG_TYPEC_MUX_TUSB1046 (Desnes Nunes) [RHEL-78828]
  - usb: typec: mux: Add support for the TUSB1046 crosspoint switch (Desnes Nunes) [RHEL-78828]
  - MAINTAINERS: Drop myself as maintainer of TYPEC port controller drivers (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: Describe TUSB1046 crosspoint switch (Desnes Nunes) [RHEL-78828]
  - USB: xhci: add support for PWRON active high (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: add TUSB73x0 PCIe (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Implement asymmetric lane margining (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Don't hardcode margining results size (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Refactor hardware margining result parsing (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Replace margining lane numbers with an enum (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Replace "both lanes" with "all lanes" (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Implement Gen 4 margining eye selection (Desnes Nunes) [RHEL-78828]
  - thunderbolt: debugfs: Add USB4 Gen 4 margining capabilities (Desnes Nunes) [RHEL-78828]
  - thunderbolt: Don't hardcode margining capabilities size (Desnes Nunes) [RHEL-78828]
  - usb: core: use sysfs_emit() instead of sprintf() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: Add support for parsing time dt properties (Desnes Nunes) [RHEL-78828]
  - dt-bindings: connector: Add properties to define time values (Desnes Nunes) [RHEL-78828]
  - usb: storage: fix wrong comments for struct bulk_cb_wrap (Desnes Nunes) [RHEL-78828]
  - usb: storage: use US_BULK_FLAG_OUT instead of constant values (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Helper for Get Connector Status command (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Remove some deadcode (Desnes Nunes) [RHEL-78828]
  - media: usb: drop vb2_ops_wait_prepare/finish (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Stop stream during unregister (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: mxs-usb-phy: add imx8qxp compatible (Desnes Nunes) [RHEL-78828]
  - xhci: add helper to stop endpoint and wait for completion (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Add support for the partner USB Modes (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: ucsi: Supply the USB capabilities to the ports (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: Add attribute file showing the USB Modes of the partner (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: typec: Add attribute file showing the supported USB modes of the port (Desnes Nunes) [RHEL-74197 RHEL-78828]
  - usb: require FMODE_WRITE for usbdev_mmap() (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: UCSI2.0 Set Sink Path command support (Desnes Nunes) [RHEL-78828]
  - usb: typec: ucsi: Do not call ACPI _DSM method for UCSI read operations (Desnes Nunes) [RHEL-78828]
  - memstick: Fix typo in comment (Desnes Nunes) [RHEL-78828]
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Desnes Nunes) [RHEL-78828]
  - media: cx231xx: Fix the S-Video capture on August VGB100 (Desnes Nunes) [RHEL-78828]
  - media: pvrusb2: Use kmemdup_array instead of kmemdup for multiple allocation (Desnes Nunes) [RHEL-78828]
  - media: pwc: set lock before calling vb2_queue_init() (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Exit early if there is not int_urb (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Avoid race condition during unregister (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Refactor the status irq API (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Require entities to have a non-zero unique ID (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4033 (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add support for the D3DFMT_R5G6B5 pixmap type (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: RealSense D421 Depth module metadata (Desnes Nunes) [RHEL-78828]
  - media: uvcvideo: Add luma 16-bit interlaced pixel format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add luma 16-bit interlaced pixel format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add V4L2-PIX-FMT-Y14P format (Desnes Nunes) [RHEL-78828]
  - media: v4l: Add V4L2-PIX-FMT-Y12P format (Desnes Nunes) [RHEL-78828]
  - media: Add Y012 video format (Desnes Nunes) [RHEL-78828]
  - media: uapi: Add IPU3 packed Y10 format (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: dwc3-imx8mp: add compatible string for imx95 (Desnes Nunes) [RHEL-78828]
  - dt-bindings: phy: imx8mq-usb: add compatible "fsl,imx95-usb-phy" (Desnes Nunes) [RHEL-78828]
  - USB: chaoskey: fail open after removal (Desnes Nunes) [RHEL-78828]
  - usb: yurex: make waiting on yurex_write interruptible (Desnes Nunes) [RHEL-78828]
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: improve error recovery for ISO transfer (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: Add revision check of 2.20[CI_REVISION_22] (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: improve dTD link logic (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: create bounce buffer for problem sglist entries if possible (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: udc: limit usb request length to max 16KB (Desnes Nunes) [RHEL-78828]
  - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: cypress,cypd4226: Drop Tegra specific GPIO defines (Desnes Nunes) [RHEL-78828]
  - dt-bindings: usb: genesys,gl850g: allow downstream device subnodes (Desnes Nunes) [RHEL-78828]
  - usb: typec: stusb160x: Make use of i2c_get_match_data() (Desnes Nunes) [RHEL-78828]
  - usb: typec: tcpm: use max() to get higher value (Desnes Nunes) [RHEL-78828]
  - usb: atm: Correct some typos (Desnes Nunes) [RHEL-78828]
  - usb: dwc3: Correct some typos in comments (Desnes Nunes) [RHEL-78828]
  - usb: typec: Fix typo in comment (Desnes Nunes) [RHEL-78828]
  - usb: host: fix typo in the comment (Desnes Nunes) [RHEL-78828]
  - staging: octeon-usb: move driver out of staging (Desnes Nunes) [RHEL-78828]
  - ipc/sem: use flexible array in 'struct sem_undo' (Rafael Aquini) [RHEL-83456]
  - mqueue: convert to ctime accessor functions (Rafael Aquini) [RHEL-83456]
  - ipc,namespace: batch free ipc_namespace structures (Rafael Aquini) [RHEL-83456]
  - ipc,namespace: make ipc namespace allocation wait for pending free (Rafael Aquini) [RHEL-83456]
  - ipc/sem: Fix dangling sem_array access in semtimedop race (Rafael Aquini) [RHEL-83456]
  - ipc: mqueue: remove unnecessary conditionals (Rafael Aquini) [RHEL-83456]
  - ipc/util.c: cleanup and improve sysvipc_find_ipc() (Rafael Aquini) [RHEL-83456]
  - ipc/mqueue: remove unnecessary (void*) conversion (Rafael Aquini) [RHEL-83456]
  - ipc: fix memleak if msg_init_ns failed in create_ipc_ns (Rafael Aquini) [RHEL-83456] {CVE-2024-53175}
  - ipc: Free mq_sysctls if ipc namespace creation failed (Rafael Aquini) [RHEL-83456]
  - ipc: update semtimedop() to use hrtimer (Rafael Aquini) [RHEL-83456]
  - ipc/sem: remove redundant assignments (Rafael Aquini) [RHEL-83456]
  - ipc/sem: do not sleep with a spin lock held (Rafael Aquini) [RHEL-83456]
  - shm: extend forced shm destroy to support objects from several IPC nses (Rafael Aquini) [RHEL-83456]
  - ipc: WARN if trying to remove ipc object which is absent (Rafael Aquini) [RHEL-83456]
  - ARM: 9114/1: oabi-compat: rework sys_semtimedop emulation (Rafael Aquini) [RHEL-83456]
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CKI Backport Bot) [RHEL-81457] {CVE-2025-21738}
  - platform/x86/intel/vsec: Add Diamond Rapids support (David Arcari) [RHEL-47412]
  - platform/x86/intel/vsec: Add support for Panther Lake (David Arcari) [RHEL-47412]
  - platform/x86/intel/vsec: Remove a useless mutex (David Arcari) [RHEL-47412]
  - cgroup/cpuset: Add warnings to catch inconsistency in exclusive CPUs (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Add a remote partition transition test to test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Clean up and restructure test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Update test_cpuset_prs.sh to use | as effective CPUs and state separator (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Code cleanup and comment update (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Remove remote_partition_check() & make update_cpumasks_hier() handle remote partition (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix error handling in remote_partition_disable() (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix race between newly created partition and dying one (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per operation (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in update_cpumasks_hier()" (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Fix spelling errors in file kernel/cgroup/cpuset.c (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Make test_cpuset_prs.sh deal with pre-isolated CPUs (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: Account for boot time isolated CPUs (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove use_parent_ecpus of cpuset (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove fetch_xcpus (Waiman Long) [RHEL-83455]
  - selftest/cgroup: Add new test cases to test_cpuset_prs.sh (Waiman Long) [RHEL-83455]
  - cgroup/cpuset: remove child_ecpus_count (Waiman Long) [RHEL-83455]
  - cpuset: use Union-Find to optimize the merging of cpumasks (Waiman Long) [RHEL-83455]
  - Union-Find: add a new module in kernel library (Waiman Long) [RHEL-83455]
  - scsi: core: Clear driver private data when retrying request (Ewan D. Milne) [RHEL-86156]
  - scsi: core: Do not retry I/Os during depopulation (Ewan D. Milne) [RHEL-86156]
  - scsi: core: Use GFP_NOIO to avoid circular locking dependency (Ewan D. Milne) [RHEL-86156]
  - scsi: transport: sas: spi: Fix kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_scan: Add kernel-doc for exported function (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_lib: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_ioctl: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_error: Add kernel-doc for exported functions (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Skip host/bus reset settle delay (Ewan D. Milne) [RHEL-86156]
  - scsi: Eliminate scsi_register() and scsi_unregister() usage & docs (Ewan D. Milne) [RHEL-86156]
  - scsi: docs: Remove init_this_scsi_driver() (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Fix hrtimer support for ndelay (Ewan D. Milne) [RHEL-86156]
  - scsi: bsg: Replace zero-length array with flexible array member (Ewan D. Milne) [RHEL-86156]
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy length (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_transport_fc: Allow setting rport state to current state (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Maintain write statistics per group number (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Implement GET STREAM STATUS (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Implement the IO Advice Hints Grouping mode page (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Allocate the MODE SENSE response from the heap (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Rework subpage code error handling (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Rework page code error handling (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Support the block limits extension VPD page (Ewan D. Milne) [RHEL-86156]
  - scsi: scsi_debug: Reduce code duplication (Ewan D. Milne) [RHEL-86156]
  - treewide: Switch/rename to timer_delete[_sync]() (Tony Camuso) [RHEL-82121]
  - ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (Tony Camuso) [RHEL-82121]
  - ipmi: make ipmi_destroy_user() return void (Tony Camuso) [RHEL-82121]
  - char:ipmi: Fix a not-used variable on a non-ACPI system (Tony Camuso) [RHEL-82121]
  - char:ipmi: Fix the wrong format specifier (Tony Camuso) [RHEL-82121]
  - [tree-wide] finally take no_llseek out (Tony Camuso) [RHEL-82121]
  - ipmi: ipmb: Add check devm_kasprintf() returned value (Tony Camuso) [RHEL-82121]
  - ipmi:ssif: Improve detecting during probing (Tony Camuso) [RHEL-82121]
  - ipmi: ipmi_ssif: fix module autoloading (Tony Camuso) [RHEL-82121]
  - RDMA/efa: Align interrupt related fields to same type (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Reset device on probe failure (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Report link speed according to device attributes (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Add option to set QP service level on create (Kamal Heib) [RHEL-83223]
  - RDMA/efa: Update device interface (Kamal Heib) [RHEL-83223]
  - rtla/tests: Test setting default options (Tomas Glozar) [RHEL-86051]
  - rtla/tests: Reset osnoise options before check (Tomas Glozar) [RHEL-86051]
  - rtla: Always set all tracer options (Tomas Glozar) [RHEL-86051]
  - rtla/osnoise: Set OSNOISE_WORKLOAD to true (Tomas Glozar) [RHEL-86051]
  - rtla: Unify apply_config between top and hist (Tomas Glozar) [RHEL-86051]
  - rtla/osnoise: Unify params struct (Tomas Glozar) [RHEL-86051]
  - redhat/kernel.spec.template: Build rtla with BPF sample collection (Tomas Glozar) [RHEL-77358]
  - tools/build: Use SYSTEM_BPFTOOL for system bpftool (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Test BPF mode (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_top: Use BPF to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_top: Move divisor to update (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat_hist: Use BPF to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Add BPF skeleton to collect samples (Tomas Glozar) [RHEL-77358]
  - rtla: Add optional dependency on BPF tooling (Tomas Glozar) [RHEL-77358]
  - tools/build: Add bpftool-skeletons feature test (Tomas Glozar) [RHEL-77358]
  - rtla/timerlat: Unify params struct (Tomas Glozar) [RHEL-77358]
  - trace/osnoise: Add trace events for samples (Tomas Glozar) [RHEL-77358]
  - tools/rtla: Add basic test suite (Tomas Glozar) [RHEL-77358]
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CKI Backport Bot) [RHEL-82701] {CVE-2025-21839}
  - watch_queue: fix pipe accounting mismatch (Carlos Maiolino) [RHEL-78249]
  - smb: client: don't retry IO on failed negprotos with soft mounts (Paulo Alcantara) [RHEL-79765]
  - tools/rv: Keep user LDFLAGS in build (Tomas Glozar) [RHEL-82810]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-582.el9]
changelog:
  - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-88093]
  - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-88093]
  - docs: move x86 documentation into Documentation/arch/ (Waiman Long) [RHEL-68940]
  - x86: Add missing code to arch/x86/include/asm/linkage.h (Waiman Long) [RHEL-68940]
  - jump_label: Fix static_key_slow_dec() yet again (Waiman Long) [RHEL-68940]
  - jump_label: Fix the fix, brown paper bags galore (Waiman Long) [RHEL-68940]
  - jump_label: Simplify and clarify static_key_fast_inc_cpus_locked() (Waiman Long) [RHEL-68940]
  - jump_label: Clarify condition in static_key_fast_inc_not_disabled() (Waiman Long) [RHEL-68940]
  - jump_label: Fix concurrency issues in static_key_slow_dec() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Use the correct length when optimizing NOPs (Waiman Long) [RHEL-68940]
  - x86/alternatives: Sort local vars in apply_alternatives() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Optimize optimize_nops() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Get rid of __optimize_nops() (Waiman Long) [RHEL-68940]
  - x86/alternatives: Use a temporary buffer when optimizing NOPs (Waiman Long) [RHEL-68940]
  - x86/alternatives: Catch late X86_FEATURE modifiers (Waiman Long) [RHEL-68940]
  - x86/percpu: Use __force to cast from __percpu address space (Waiman Long) [RHEL-68940]
  - x86/percpu: Unify arch_raw_cpu_ptr() defines (Waiman Long) [RHEL-68940]
  - jump_label,module: Don't alloc static_key_mod for __ro_after_init keys (Waiman Long) [RHEL-68940]
  - x86/bpf: Fix IP for relocating call depth accounting (Waiman Long) [RHEL-68940]
  - x86/alternatives: Move apply_relocation() out of init section (Waiman Long) [RHEL-68940]
  - x86/percpu: Avoid sparse warning with cast to named address space (Waiman Long) [RHEL-68940]
  - x86/traps: Use current_top_of_stack() helper in traps.c (Waiman Long) [RHEL-68940]
  - x86/percpu: Fix "const_pcpu_hot" version generation failure (Waiman Long) [RHEL-68940]
  - x86/callthunks: Correct calculation of dest address in is_callthunk() (Waiman Long) [RHEL-68940]
  - x86/smp: Use atomic_try_cmpxchg in native_stop_other_cpus() (Waiman Long) [RHEL-68940]
  - x86/smp: Move the call to smp_processor_id() after the early exit in native_stop_other_cpus() (Waiman Long) [RHEL-68940]
  - x86/percpu: Declare const_pcpu_hot as extern const variable (Waiman Long) [RHEL-68940]
  - x86/paravirt: Remove no longer needed paravirt patching code (Waiman Long) [RHEL-68940]
  - x86/callthunks: Mark apply_relocation() as __init_or_module (Waiman Long) [RHEL-68940]
  - x86/callthunks: Fix and unify call thunks assembly snippets (Waiman Long) [RHEL-68940]
  - x86/callthunks: Handle %rip-relative relocations in call thunk template (Waiman Long) [RHEL-68940]
  - x86/percpu: Define PER_CPU_VAR macro also for !__ASSEMBLY__ (Waiman Long) [RHEL-68940]
  - x86/percpu: Return correct variable from current_top_of_stack() (Waiman Long) [RHEL-68940]
  - x86/percpu: Introduce const-qualified const_pcpu_hot to micro-optimize code generation (Waiman Long) [RHEL-68940]
  - x86/percpu: Introduce %rip-relative addressing to PER_CPU_VAR() (Waiman Long) [RHEL-68940]
  - x86/percpu, xen: Correct PER_CPU_VAR() usage to include symbol and its addend (Waiman Long) [RHEL-68940]
  - x86/percpu: Correct PER_CPU_VAR() usage to include symbol and its addend (Waiman Long) [RHEL-68940]
  - x86/fpu: Clean up FPU switching in the middle of task switching (Waiman Long) [RHEL-68940]
  - x86/percpu: Use the correct asm operand modifier in percpu_stable_op() (Waiman Long) [RHEL-68940]
  - x86/percpu: Use C for arch_raw_cpu_ptr(), to improve code generation (Waiman Long) [RHEL-68940]
  - x86/percpu: Rewrite arch_raw_cpu_ptr() to be easier for compilers to optimize (Waiman Long) [RHEL-68940]
  - x86/percpu: Disable named address spaces for KASAN (Waiman Long) [RHEL-68940]
  - x86/percpu: Use C for percpu read/write accessors (Waiman Long) [RHEL-68940]
  - x86/percpu: Use compiler segment prefix qualifier (Waiman Long) [RHEL-68940]
  - x86/percpu: Enable named address spaces with known compiler version (Waiman Long) [RHEL-68940]
  - x86/callthunks: Use EXPORT_PER_CPU_SYMBOL_GPL() for per CPU variables (Waiman Long) [RHEL-68940]
  - x86/paravirt: Make BUG_func() usable by non-GPL modules (Waiman Long) [RHEL-68940]
  - x86/alternative: Correct feature bit debug output (Waiman Long) [RHEL-68940]
  - x86/paravirt: Switch mixed paravirt/alternative calls to alternatives (Waiman Long) [RHEL-68940]
  - x86/alternative: Add indirect call patching (Waiman Long) [RHEL-68940]
  - x86/paravirt: Move some functions and defines to alternative.c (Waiman Long) [RHEL-68940]
  - x86/paravirt: Introduce ALT_NOT_XEN (Waiman Long) [RHEL-68940]
  - x86/alternatives: Sync core before enabling interrupts (Waiman Long) [RHEL-68940]
  - arch: Remove cmpxchg_double (Waiman Long) [RHEL-68940]
  - x86,intel_iommu: Replace cmpxchg_double() (Waiman Long) [RHEL-68940]
  - x86,amd_iommu: Replace cmpxchg_double() (Waiman Long) [RHEL-68940]
  - locking/atomic: Correct (cmp)xchg() instrumentation (Waiman Long) [RHEL-68940]
  - arm64: cmpxchg_double*: hazard against entire exchange variable (Waiman Long) [RHEL-68940]
  - jump_label: Prevent key->enabled int overflow (Waiman Long) [RHEL-68940]
  - jump_label: Use atomic_try_cmpxchg() in static_key_slow_inc_cpuslocked() (Waiman Long) [RHEL-68940]
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault) [RHEL-57031]
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Hangbin Liu) [RHEL-84573]
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Hangbin Liu) [RHEL-84573] {CVE-2025-22005}
  - net: ipv6: fix dst ref loop on input in seg6 lwt (Hangbin Liu) [RHEL-84573]
  - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (Hangbin Liu) [RHEL-84573] {CVE-2025-21768}
  - inet: ipmr: fix data-races (Hangbin Liu) [RHEL-84573]
  - perf script: Fix hangup in offline flamegraph report (Anubhav Shelat) [RHEL-87957]
  - perf script: force stdin for flamegraph in live mode (Anubhav Shelat) [RHEL-87957]
  - locking/lockdep: Add kasan_check_byte() check in lock_acquire() (Waiman Long) [RHEL-81997]
  - locking/lockdep: Disable KASAN instrumentation of lockdep.c (Waiman Long) [RHEL-81997]
  - Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Fix driver sending truncated data (Bastien Nocera) [RHEL-74483]
  - Bluetooth: MGMT: Fix Add Device to responding before completing (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_sync: Fix not setting Random Address when required (Bastien Nocera) [RHEL-74483]
  - Bluetooth: iso: Fix circular lock in iso_conn_big_sync (Bastien Nocera) [RHEL-74483] {CVE-2024-54191}
  - Bluetooth: SCO: Add support for 16 bits transparent voice setting (Bastien Nocera) [RHEL-74483]
  - Bluetooth: iso: Fix recursive locking warning (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Improve setsockopt() handling of malformed user input (Bastien Nocera) [RHEL-74483]
  - net: Make copy_safe_from_sockptr() match documentation (Bastien Nocera) [RHEL-74483]
  - net: add copy_safe_from_sockptr() helper (Bastien Nocera) [RHEL-74483]
  - net/tcp: Introduce TCP_AO setsockopt()s [partial] (Bastien Nocera) [RHEL-74483]
  - Bluetooth: SCO: remove the redundant sco_conn_put (Bastien Nocera) [RHEL-74483]
  - Bluetooth: MGMT: Add initial implementation of MGMT_OP_HCI_CMD_SYNC (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_bcm: Use the devm_clk_get_optional() helper (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Send BIG Create Sync via hci_sync (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_conn: Remove alloc from critical section (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Use kref to track lifetime of iso_conn (Bastien Nocera) [RHEL-74483]
  - Bluetooth: SCO: Use kref to track lifetime of sco_conn (Bastien Nocera) [RHEL-74483]
  - Bluetooth: HCI: Add IPC(11) bus type (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add 3 HWIDs for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Fix matching parent socket for BIS slave (Bastien Nocera) [RHEL-74483]
  - Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btrtl: Decrease HCI_OP_RESET timeout from 10 s to 2 s (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btintel_pcie: Replace deprecated PCI functions (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Set quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Support new quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: Add new quirks for ATS2851 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_qca: use devm_clk_get_optional_enabled_with_rate() (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btmtksdio: Lookup device node only as fallback (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Add GPIO support to power save feature (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add USB HW IDs for MT7920/MT7925 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (Bastien Nocera) [RHEL-74483]
  - bluetooth: Fix typos in the comments (Bastien Nocera) [RHEL-74483]
  - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Rename IW615 to IW610 (Bastien Nocera) [RHEL-74483]
  - Bluetooth: btnxpuart: Drop _v0 suffix from FW names (Bastien Nocera) [RHEL-74483]
  - Bluetooth: add HAS_IOPORT dependencies (Bastien Nocera) [RHEL-74483]
  - perf annotate: Return errors from disasm_line__parse_powerpc() (Jakub Brnak) [RHEL-83785]
  - perf annotate: Add annotation_options.disassembler_used (Jakub Brnak) [RHEL-83785]
  - perf annotate: Use an array for the disassembler preference (Jakub Brnak) [RHEL-83785]
  - perf disasm: Allow configuring what disassemblers to use (Jakub Brnak) [RHEL-83785]
  - perf disasm: Define stubs for the LLVM and capstone disassemblers (Jakub Brnak) [RHEL-83785]
  - perf disasm: Introduce symbol__disassemble_objdump() (Jakub Brnak) [RHEL-83785]
  - netpoll: hold rcu read lock in __netpoll_send_skb() (Paolo Abeni) [RHEL-87474]
  - net: Clear old fragment checksum value in napi_reuse_skb (Paolo Abeni) [RHEL-87474]
  - neighbour: use RCU protection in __neigh_notify() (Paolo Abeni) [RHEL-87474]
  - iomap: add a workaround for racy i_size updates on block devices (CKI Backport Bot) [RHEL-79099]
  - selftests: netfilter: add test case for recent mismatch bug (CKI Backport Bot) [RHEL-87163]
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (CKI Backport Bot) [RHEL-87163]
  - sctp: detect and prevent references to a freed transport in sendmsg (Xin Long) [RHEL-84590]
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Xin Long) [RHEL-84590]
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: udp_port: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Xin Long) [RHEL-84590]
  - scsi: fnic: Remove unnecessary NUL-terminations (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove redundant flush_workqueue() calls (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary spinlock locking and unlocking (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace fnic->lock_flags with local flags (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace use of sizeof with standard usage (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix indentation and remove unnecessary parenthesis (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary debug print (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Test for memory allocation failure and return error code (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return appropriate error code from failure of scsi drv init (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return appropriate error code for mem alloc failure (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix use of uninitialized value in debug message (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Delete incorrect debugfs error handling (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove extern definition from .c files (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Increment driver version (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support to handle port channel RSCN (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Code cleanup (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add stats and related functionality (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify fnic interfaces to use FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify IO path to use FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add functionality in fnic to support FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and integrate support for FIP (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and integrate support for FDMI (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add Cisco hardware model names (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for unsolicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for target based solicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for fabric based solicited requests and responses (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add headers and definitions for FDLS (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vcalloc() instead of vmalloc() and memset(0) (Karan Kumar) [RHEL-64440]
  - scsi: replace blk_mq_pci_map_queues with blk_mq_map_hw_queues (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Move flush_work initialization out of if block (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Convert snprintf() to sysfs_emit() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Clean up some inconsistent indenting (Karan Kumar) [RHEL-64440]
  - scsi: fnic: unlock on error path in fnic_queuecommand() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Increment driver version (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Improve logs and add support for multiqueue (MQ) (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic driver (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add support for multiqueue (MQ) in fnic_main.c (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove usage of host_lock (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Define stats to track multiqueue (MQ) IOs (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify ISRs to support multiqueue (MQ) (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Refactor and redefine fnic.h for multiqueue (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Get copy workqueue count and interrupt mode from config (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Rename wq_copy to hw_copy_wq (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and improve log messages (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Add and use fnic number (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Modify definitions to sync with VIC firmware (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Return error if vmalloc() failed (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Clean up some inconsistent indenting (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix sg_reset success path (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unused functions fnic_scsi_host_start/end_tag() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace sgreset tag with max_tag_id (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vmalloc_array() and vcalloc() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Use vzalloc() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Refactor code in fnic probe to initialize SCSI layer (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Replace DMA mask of 64 bits with 47 bits (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove unneeded flush_workqueue() (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Remove redundant NULL check (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Stop using the SCSI pointer (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Fix a tracing statement (Karan Kumar) [RHEL-64440]
  - scsi: fnic: Call scsi_done() directly (Karan Kumar) [RHEL-64440]
  - tools/power turbostat: v2025.05.06 (David Arcari) [RHEL-86839]
  - tools/power turbostat: disable "cpuidle" invocation counters, by default (David Arcari) [RHEL-86839]
  - tools/power turbostat: re-factor sysfs code (David Arcari) [RHEL-86839]
  - tools/power turbostat: Restore GFX sysfs fflush() call (David Arcari) [RHEL-86839]
  - tools/power turbostat: Document GNR UncMHz domain convention (David Arcari) [RHEL-86839]
  - tools/power turbostat: report CoreThr per measurement interval (David Arcari) [RHEL-86839]
  - tools/power turbostat: Increase CPU_SUBSET_MAXCPUS to 8192 (David Arcari) [RHEL-86839]
  - tools/power turbostat: Add idle governor statistics reporting (David Arcari) [RHEL-86839]
  - tools/power turbostat: Fix names matching (David Arcari) [RHEL-86839]
  - tools/power turbostat: Allow Zero return value for some RAPL registers (David Arcari) [RHEL-86839]
  - tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options (David Arcari) [RHEL-86839]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (David Arcari) [RHEL-45087]
  - platform/x86: intel: Use *-y instead of *-objs in Makefile (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Update documentation with image download path (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add Clearwater Forest to CPU support list (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Fix SBAF title underline length (David Arcari) [RHEL-45087]
  - trace: platform/x86/intel/ifs: Add SBAF trace support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add SBAF test support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Add SBAF test image loading support (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Refactor MSR usage in IFS test code (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Initialize union ifs_status to zero (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Switch to new Intel CPU model defines (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Disable irq during one load stage (David Arcari) [RHEL-45087]
  - platform/x86/intel/ifs: Classify error scenarios correctly (David Arcari) [RHEL-45087]
  - RDMA/mlx5: Fix implicit ODP hang on parent deregistration (CKI Backport Bot) [RHEL-81415] {CVE-2025-21714}
  - RDMA/mlx5: Fix implicit ODP use after free (CKI Backport Bot) [RHEL-81415] {CVE-2025-21714}
  - redhat: remove kernel-ipaclones-internal package (Joe Lawrence) [RHEL-86518]
  - net: decrease cached dst counters in dst_release (Antoine Tenart) [RHEL-83031]
  - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-86674]
  - RDMA/bnxt_re: Remove unusable nq variable (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix budget handling of notification queue (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support perf management counters (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix reporting maximum SRQs on P7 chips (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix allocation of QP table (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix the statistics for Gen P7 VF (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix issue in the unload path (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add sanity checks on rdev validity (Sreekanth Reddy) [RHEL-72652 RHEL-76569 RHEL-80075]
  - RDMA/bnxt_re: Fix an issue in bnxt_re_async_notifier (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Allocate dev_attr information dynamically (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Pass the context for ulp_irq_stop (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support to handle DCB_CONFIG_CHANGE event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Query firmware defaults of CC params during probe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add Async event handling support (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - bnxt_en: Add ULP call to notify async events (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove deliver net device event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix MSN table size for variable wqe mode (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add send queue size check for variable wqe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix to export port num to ib_query_qp (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix setting mandatory attributes for modify_qp (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove unnecessary header file inclusion (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Eliminate need for some forward declarations (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Optimize error handling in bnxt_re_probe (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove unnecessary goto in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Remove extra new line in bnxt_re_netdev_event (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Don't fail destroy QP and cleanup debugfs earlier (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Use the default mode of congestion control (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support different traffic class (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Cache MSIx info to a local structure (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Refurbish CQ to NQ hash calculation (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for CQ rx coalescing (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Refactor NQ allocation (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fail probe early when not enough MSI-x vectors are reserved (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add set_func_resources support for P5/P7 adapters (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Enhance RoCE SRIOV resource configuration design (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for optimized modify QP (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - bnxt_en: Add support for RoCE sriov configuration (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add debugfs hook in the driver (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support raw data query for each resources (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for querying HW contexts (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Support driver specific data collection using rdma tool (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Fix access flags for MR and QP modify (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - RDMA/bnxt_re: Add support for modify_device hook (Sreekanth Reddy) [RHEL-72652 RHEL-76569]
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Marcin Juszkiewicz) [RHEL-83075]
  - igb: Fix potential invalid memory access in igb_init_module() (CKI Backport Bot) [RHEL-73651] {CVE-2024-52332}
  - perf vendor events: Update Tigerlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update SkylakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Skylake metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Sierraforest events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Rocketlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Meteorlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update/add Lunarlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update IcelakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Icelake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update HaswellX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Haswell events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update/add Graniterapids events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update GrandRidge events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update EmeraldRapids events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Add Clearwaterforest events (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update CascadelakeX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update BroadwellX events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update BroadwellDE events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Broadwell events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Add Arrowlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update AlderlakeN events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Alderlake events/metrics (Michael Petlan) [RHEL-21925]
  - perf vendor events: Update Sapphirerapids events/metrics (Michael Petlan) [RHEL-21925]
  - nfsd: fix UAF when access ex_uuid or ex_stats (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - SUNRPC: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - nfsd: no need get cache ref when protected by rcu (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - SUNRPC: introduce cache_check_rcu to help check in rcu context (Olga Kornievskaia) [RHEL-80506] {CVE-2024-53216}
  - Enable X86_USER_SHADOW_STACK (Štěpán Horáček) [RHEL-15599]
  - mm: don't try THP alignment for FS without get_unmapped_area (Štěpán Horáček) [RHEL-15599]
  - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes (Štěpán Horáček) [RHEL-15599]
  - mm: care about shadow stack guard gap when getting an unmapped area (Štěpán Horáček) [RHEL-15599]
  - mm: pass vm_flags to generic_get_unmapped_area() (Štěpán Horáček) [RHEL-15599]
  - mm: make arch_get_unmapped_area() take vm_flags by default (Štěpán Horáček) [RHEL-15599]
  - x86/mm: care about shadow stack guard gap during placement (Štěpán Horáček) [RHEL-15599]
  - x86/mm: implement HAVE_ARCH_UNMAPPED_AREA_VMFLAGS (Štěpán Horáček) [RHEL-15599]
  - mm: take placement mappings gap into account (Štěpán Horáček) [RHEL-15599]
  - treewide: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - powerpc: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - parisc: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - csky: use initializer for struct vm_unmapped_area_info (Štěpán Horáček) [RHEL-15599]
  - thp: add thp_get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: use get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: remove export for get_unmapped_area() (Štěpán Horáček) [RHEL-15599]
  - mm: introduce arch_get_unmapped_area_vmflags() (Štěpán Horáček) [RHEL-15599]
  - mm: switch mm->get_unmapped_area() to a flag (Štěpán Horáček) [RHEL-15599]
  - proc: refactor pde_get_unmapped_area as prep (Štěpán Horáček) [RHEL-15599]
  - selftests/x86: add placement guard gap test for shstk (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Enable shadow stacks for x32 (Štěpán Horáček) [RHEL-15599]
  - arch: Reserve map_shadow_stack() syscall number for all architectures (Štěpán Horáček) [RHEL-15599]
  - mm: thp_get_unmapped_area must honour topdown preference (Štěpán Horáček) [RHEL-15599]
  - mm: mmap: map MAP_STACK to VM_NOHUGEPAGE (Štěpán Horáček) [RHEL-15599]
  - mm: align larger anonymous mappings on THP boundaries (Štěpán Horáček) [RHEL-15599]
  - alpha: Fix up new futex syscall numbers (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add warning for shadow stack double unmap (Štěpán Horáček) [RHEL-15599]
  - selftests/x86: Update map_shadow_stack syscall nr (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Change order of __user in type (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Don't retry vm_munmap() on -EINTR (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add ARCH_SHSTK_STATUS (Štěpán Horáček) [RHEL-15599]
  - x86/shstk: Add ARCH_SHSTK_UNLOCK (Štěpán Horáček) [RHEL-15599]
  - crypto: ccp - Fix uAPI definitions of PSP errors (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add support for PCI device 0x1134 (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix check for the primary ASP device (Vladis Dronov) [RHEL-85131]
  - crypto: ccp: Add external API interface for PSP module initialization (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Use scoped guard for mutex (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - do not request interrupt on cmd completion when irqs disabled (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Remove unused declaration sp_get_master() (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add additional information about an SEV firmware upgrade (Vladis Dronov) [RHEL-85131]
  - KVM: SEV: uapi: fix typo in SEV_RET_INVALID_CONFIG (Vladis Dronov) [RHEL-85131]
  - crypto: ccp: Add the SNP_VLEK_LOAD command (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Move message about TSME being enabled later in init (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add support for getting security attributes on some older systems (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - align psp_platform_access_msg (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Move security attributes to their own file (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Represent capabilities register as a union (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - drop platform ifdef checks (Vladis Dronov) [RHEL-85131]
  - crypto: tools/ccp - Remove unused variable (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Update return values for some unit tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix some unfused tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix sample application signature passing (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix DBC sample application error handling (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Fix ioctl unit tests (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add Mario to MAINTAINERS (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add unit tests for dynamic boost control (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add a sample python script for Dynamic Boost Control (Vladis Dronov) [RHEL-85131]
  - crypto: ccp - Add a sample library for ioctl use (Vladis Dronov) [RHEL-85131]
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CKI Backport Bot) [RHEL-83191] {CVE-2025-21847}
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long) [RHEL-69423]
  - firmware: arm_scpi: Move power-domain driver to the pmdomain dir (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scpi: Convert to platform remove callback returning void (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-65607]
  - arm64: Use SYSTEM_OFF2 PSCI call to power off for hibernate (Steve Dunnagan) [RHEL-65607]
  - firmware/psci: Add definitions for PSCI v1.3 specification (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Report duplicate opps as firmware bugs (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Skip opp duplicates (Steve Dunnagan) [RHEL-65607]
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Steve Dunnagan) [RHEL-65607]
  - arm64: smccc: replace custom COUNT_ARGS() & CONCATENATE() implementations (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use vendor string in max-rx-timeout-ms (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Reject clear channel request on A2P (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Queue in scmi layer for mailbox implementation (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Give SMC transport precedence over mailbox (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (Steve Dunnagan) [RHEL-65607]
  - redhat/configs: Add SCMI configs (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add initial support for i.MX MISC protocol (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add initial support for i.MX BBM protocol (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add NXP i.MX95 SCMI documentation (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace comma with the semicolon (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace the use of of_node_put() to __free(device_node) (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix trivial whitespace/coding style issues (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use max-rx-timeout-ms from devicetree (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove const from transport descriptors (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Simplify with scoped for each OF child loop (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Update various protocols versions (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove legacy transport-layer code (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make VirtIO transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make OPTEE transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make SMC transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make MBOX transport a standalone driver (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for standalone transport drivers (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Introduce packet handling helpers (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Introduce setup_shmem_iomap (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix double free in OPTEE transport (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix voltage description in failure cases (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix incorrect error propagation in scmi_voltage_descriptors_get (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support to reset the debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Create debugfs files for SCMI communication debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Track basic SCMI communication debug metrics (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for debug metrics at the interface (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Remove superfluous handle_to_scmi_info (Steve Dunnagan) [RHEL-65607]
  - firmware/smccc: Call arch-specific hook on discovering KVM services (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for platform to agent channel completion (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add support for system suspend in power control driver (Steve Dunnagan) [RHEL-65607]
  - firmware: smccc: Export revision soc_id function (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Avoid non-constant printk format strings (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Use dev_err_probe to bail out (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix struct kernel-doc warnings in optee transport (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Make scmi_bus_type const (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Fix double free in SMC transport cleanup path (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Add multiple protocols registration support (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Replace asm-generic/bug.h with linux/bug.h (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Convert to platform remove callback returning void (Steve Dunnagan) [RHEL-65607]
  - pmdomain: arm_scmi: Move Kconfig options to the pmdomain subsystem (Steve Dunnagan) [RHEL-65607]
  - firmware: arm_scmi: Move power-domain driver to the pmdomain dir (Steve Dunnagan) [RHEL-65607]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-583.el9]
changelog:
  - Revert "io_uring/uring_cmd: defer SQE copying until it's needed" (Jeff Moyer) [RHEL-82695] {CVE-2025-21837}
  - s390/dasd: Remove DMA alignment (Mete Durlu) [RHEL-88820]
  - ALSA: update RHEL kconfigs for 6.13 upstream code (Jaroslav Kysela) [RHEL-80681]
  - ASoC: use playback_only/capture_only instead dpcm_playback/dpcm_capture flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tegra: Fix ADX S24_LE audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: simple-card-utils: fix priv->dai_props indexing (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/realtek: Fix volume adjustment issue on Lenovo ThinkBook 16P Gen5 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l43: Add codec force suspend/resume ops (Jaroslav Kysela) [RHEL-80681]
  - ALSA: doc: Add codecs/index.rst to top-level index (Jaroslav Kysela) [RHEL-80681]
  - ALSA: doc: cs35l56: Add information about Cirrus Logic CS35L54/56/57 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: samsung: Add missing selects for MFD_WM8994 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: es8316: Fix HW rate calculation for 48Mhz MCLK (Jaroslav Kysela) [RHEL-80681]
  - ASoC: wm8994: Add depends on MFD core (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas2781: Fix occasional calibration failture (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Adjust ANA_MICBIAS to reduce pop noise (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: fix remaining descriptor races in sound/core/compress_offload.c (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Drop unneeded no_free_ptr() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Ignore SUBSYS_ID not found for tas2563 projects (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: improve file descriptors installation for dma-buf (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: use safe list iteration in snd_compr_task_seq() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: import DMA_BUF namespace (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: avoid 64-bit get_user() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: wcd937x: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: Use *-y for Makefile (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Fix error code tas2781_read_acpi() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Show the codec quirk info at probing (Jaroslav Kysela) [RHEL-80681]
  - ALSA: asihpi: Remove unused variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda/tas2781: Add speaker id check for ASUS projects (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: dapm: Add location information for dapm-graph tool (Jaroslav Kysela) [RHEL-80681]
  - ASoC: apple: Fix the wrong format specifier (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: fix dead hyperlink to Intel HD-Audio spec (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ac97: bus: Fix the mistake in the comment (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: Fix build dependencies for `SND_SOC_AMD_PS` (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Poll jack events for LS7A HD-Audio (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ump: Fix the wrong format specifier (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi-intel-lnl-match: add rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: stm32: dfsdm: change rate upper limits (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: fix uninitialized variable refence (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: simple-mux: add idle-state property (Jaroslav Kysela) [RHEL-80681]
  - ASoc: simple-mux: add idle-state support (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Minor formatting fixups in sdw.h header (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Update the includes on the sdw.h header (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: remove redundant assignment to variable ret (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdca: test adev before calling acpi_dev_for_each_child (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: fix the pcm device numbering for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add soundwire machine driver for legacy stack (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: move get_acp63_cpu_pin_id() to common file (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: add soundwire machines for acp6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add RT711, RT714 & RT1316 support for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: add rt722 based soundwire machines (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Add missing descriptions in structs (Jaroslav Kysela) [RHEL-80681]
  - ALSA: pcm: Define snd_pcm_mmap_data_{open|close}() locally (Jaroslav Kysela) [RHEL-80681]
  - ALSA: tidyup SNDRV_PCM_TRIGGER_xxx numbering (Jaroslav Kysela) [RHEL-80681]
  - ASoC: simple-card-utils: care simple_util_dai for dummy DAI (Jaroslav Kysela) [RHEL-80681]
  - ASoC: test-component: Support continuous rates for test component (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Add headphone mixer switch (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Add left/right DAC volume control (Jaroslav Kysela) [RHEL-80681]
  - ASoc: SOF: ipc4-pcm: fix uninit-value in sof_ipc4_pcm_dai_link_fixup_rate (Jaroslav Kysela) [RHEL-80681]
  - ASoC: max98088: Remove duplicate DACs (Jaroslav Kysela) [RHEL-80681]
  - ASoC: machine: update documentation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sm8250: add handling of secondary MI2S clock (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ump: remove unnecessary check on blk (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: Revert make SND_SOC_ACPI_INTEL_MATCH depend on ACPI (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: Only select SND_SOC_SDCA if ACPI is enabled (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: Fix invalid logical judgement (Jaroslav Kysela) [RHEL-80681]
  - ASoC: ux500: Remove redundant casts (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: handle only paused streams in hda_dai_suspend() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: Add support for persistent Code Loader DMA buffers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda-stream: Always use at least two BDLE for transfers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc3-loader: 'Handle' PROBE_INFO ext_manifest type when parsing (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ext_manifest: Add missing ext_manifest type for PROBE_INFO (Jaroslav Kysela) [RHEL-80681]
  - ASoC: da7213: Extend support for the MCK in range [2, 50] MHz (Jaroslav Kysela) [RHEL-80681]
  - ASoC: da7213: Avoid setting PLL when closing audio stream (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sma1307: Add driver for Iron Device SMA1307 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: irondevice,sma1307: Add initial DT (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: select SND_SOC_SDCA by SND_SOC_ACPI_INTEL_SDCA_QUIRKS (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Kconfig: make SND_SOC_ACPI_INTEL_MATCH depend on ACPI (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: Use runtime pointer in snd_compr_poll() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: change interrupt mask from XU to GE (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt722: change the interrupt mask for jack type detection (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sc8280xp Add SM8750 sound card (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: qcom,sm8250: Add SM8750 sound card (Jaroslav Kysela) [RHEL-80681]
  - ASoC: bcm63xx-pcm-whistler: fix uninit-value in i2s_dma_isr (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: x1e80100: Support boards with two speakers (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Reduce pop noise (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: Fix for ACP SOF dmic tplg component load failure (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Fix unused variable warning (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: intel: Switch to pci_alloc_irq_vectors API (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: intel: Don't free interrupt when suspending (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cleanup function parameter for rtd and its id (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-core: do rtd->id trick at snd_soc_add_pcm_runtime() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: generic: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sh: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: meson: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: switch to use rtd->id from rtd->num (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rename rtd->num to rtd->id (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add aw88081 amplifier driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add schema for "awinic,aw88081" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: Update stream_name in dai_links structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils/intel/amd: refactor dai link init logic (Jaroslav Kysela) [RHEL-80681]
  - mfd: cs42l43: Disable IRQs during suspend (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: update clock api details (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: wcd937x: Remove unused of_gpio.h (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Remove unused including <linux/version.h> (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: add powerdown gpio (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: drop patform_data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: document the adau1373 Codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1373: add some kconfig text (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: remove incorrect of_match_ptr() (Jaroslav Kysela) [RHEL-80681]
  - ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: Add toctree index entry for co-processor acceleration API (Jaroslav Kysela) [RHEL-80681]
  - ALSA: docs: compress-accel: Format state machine flowchart as code block (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: ES8326: Modify the configuration of and micbias (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-devres: Remove unused devm_snd_soc_register_dai (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: add mic function (Jaroslav Kysela) [RHEL-80681]
  - ALSA: compress_offload: introduce accel operation mode (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: leverage ring sense IRQs to correctly detect headsets (Jaroslav Kysela) [RHEL-80681]
  - ASoC: cs42l84: Add new codec driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: fix rt_sdca_index_update_bits function parameter description (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: support allwinner H616 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: Add playback only flag to quirks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sun4i-codec: Add support for different DAC FIFOC addresses to quirks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: fix error code in ntp8835_i2c_probe() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-pcm: merge DPCM and non-DPCM validation check (Jaroslav Kysela) [RHEL-80681]
  - ASoC: doc: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-pcm: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-topology: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel: boards: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-compress: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-core: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: samsung: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sof: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: remove dpcm_xxx flags (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: core: Add fw, tplg and ipc type override parameters (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: sof-of-dev: add parameter to override tplg/fw_filename (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: core: Add debug module parameters to set IPC and boot timeout (Jaroslav Kysela) [RHEL-80681]
  - ASoC: uniphier: Handle regmap_write errors in aio_iecout_set_enable() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl_xcvr: reset RX dpath after wrong preamble (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl_xcvr: enable interrupt of cmdc status update (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tegra: Add support for S24_LE audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: adau1372: add match table (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-utils: Remove PAGE_SIZE compile-time constant assumption (Jaroslav Kysela) [RHEL-80681]
  - ASoC: nau8821: check regmap_raw_read/regmap_raw_write for failure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: Add stream name to ACP PDM DMIC devices (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rx651: Use card->dev in replace of the &pdev->dev argument in the dev_err function (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda: use machine_check() for SoundWire (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi: add is_device_rt712_vb() helper (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: add SmartMic DAI for RT713 VB (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sdw_utils: add SmartMic DAI for RT712 VB (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt712-sdca: detect the SMART_MIC function during the probe stage (Jaroslav Kysela) [RHEL-80681]
  - ASoC: soc-acpi: introduce new 'machine check' callback (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: add quirk function for RT712_VB match (Jaroslav Kysela) [RHEL-80681]
  - soundwire: slave: lookup SDCA version and functions (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SDCA: add initial module (Jaroslav Kysela) [RHEL-80681]
  - ASoC/soundwire: remove sdw_slave_extended_id (Jaroslav Kysela) [RHEL-80681]
  - soundwire: sdw_intel: include linux/acpi.h (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Remove unneeded semicolon (Jaroslav Kysela) [RHEL-80681]
  - ASoC: makes snd_soc_set_runtime_hwparams() inline (Jaroslav Kysela) [RHEL-80681]
  - mfd: cs42l43: Fix issues in probe error paths (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: Enhance switch case to prevent uninitialized variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: hda: Fix all stream interrupts definition (Jaroslav Kysela) [RHEL-80681]
  - ASoC/SoundWire: Intel: lnl: enable interrupts after first power-up/before last power-down (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: Intel: hda-mlink: expose unlocked interrupt enable routine (Jaroslav Kysela) [RHEL-80681]
  - ASoC: imx-card: Add CS42888 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: imx-card: Set mclk for codec (Jaroslav Kysela) [RHEL-80681]
  - ALSA: usb-audio: Use snprintf instead of sprintf in build_mixer_unit_ctl (Jaroslav Kysela) [RHEL-80681]
  - ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put (Jaroslav Kysela) [RHEL-80681]
  - ALSA: firewire: Remove unused cmp_connection_update (Jaroslav Kysela) [RHEL-80681]
  - soundwire: cadence: add soft-reset on startup (Jaroslav Kysela) [RHEL-80681]
  - soundwire: cadence: clear MCP BLOCK_WAKEUP in init (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Clean logically deadcode in rt721-sdca.c (Jaroslav Kysela) [RHEL-80681]
  - ASoC: qcom: sm8250: correct typo in shutdown function name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: Add rt721-sdca support for PTL platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Add helper function to print the module's in/out audio format (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Concentrate prints inside of sof_ipc4_init_output_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Use local variables in sof_ipc4_init_output_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Simplify code to deal with process modules without output (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Simplify match format print in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Remove redundant check in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Use local variables in sof_ipc4_init_input_audio_fmt() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc4-topology: Drop the 'index' from 'Pin index' of format print (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Fix issue of warning message (Jaroslav Kysela) [RHEL-80681]
  - ALSA: aica: Remove unused variable (Jaroslav Kysela) [RHEL-80681]
  - ALSA: dbri: Fix formatting issue in dbri.c (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Fix mixed declarations and code warning (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Return ENOSPC for out-of-bounds flash writes (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Simplify linked channel handling (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Add support for device map retrieval (Jaroslav Kysela) [RHEL-80681]
  - ALSA: scarlett2: Fix redeclaration of loop variable (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt721-sdca: Add RT721 SDCA driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt-sdw-common: Common functions for Realtek soundwire driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Add rt721 support (Jaroslav Kysela) [RHEL-80681]
  - ASoC: intel/sdw_utils: refactor RT multifunction sdca speaker codecs (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: fsl_qmc_audio: Remove the logging when parsing channels (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tlv320adc3xxx: Fix unsigned int compared against 0 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: uniphier: Handle regmap_write errors in aio_src_set_param() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: Intel: sof_rt5682: Add support for ptl_max98360a_rt5682 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: sh: rz-ssi: Use SSIFCR_FIFO_RST macro (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add support for DP0/DPn 'lane-list' property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi_disco: add support for clock-scales property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add error handling for property array read (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add support for peripheral channelprepare timeout (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add new properties from 2.0 spec (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: add comment on DP0-supported property (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi-disco: remove DPn audio-modes (Jaroslav Kysela) [RHEL-80681]
  - soundwire: mipi_disco: add MIPI-specific property_read_bool() helpers (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_stream_runtime memory layout (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_master_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_bus structure (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_slave_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_dp0_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: optimize sdw_dpn_prop (Jaroslav Kysela) [RHEL-80681]
  - soundwire: Correct some typos in comments (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: amd: pass acp_rev as soundwire resource data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: ps: pass acp pci revision id as soundwire resource data (Jaroslav Kysela) [RHEL-80681]
  - soundwire: amd: pass acp pci revision id as resource data (Jaroslav Kysela) [RHEL-80681]
  - soundwire: amd: refactor existing code for acp 6.3 platform (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: wcd9335: remove unnecessary MODULE_ALIAS() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: drop bogus NULL check from i2s_irq_handler (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: fix the range of patch code address (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: aw88399: Fix spelling mistake "unsupport" -> "unsupported" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: fsl: Use maple tree register cache (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas5805m: Improve a size determination in tas5805m_i2c_probe() (Jaroslav Kysela) [RHEL-80681]
  - ASoC: bcm2835-i2s: Use maple tree register cache (Jaroslav Kysela) [RHEL-80681]
  - ASoC: rt1320: reads patch code from firmware file (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: aw88395: Fix spelling mistake "unsupport" -> "unsupported" (Jaroslav Kysela) [RHEL-80681]
  - ASoC: tas2781: Fix redundant parameter assignment (Jaroslav Kysela) [RHEL-80681]
  - ASoC: SOF: ipc3: Use standard dev_dbg API (Jaroslav Kysela) [RHEL-80681]
  - ASoC: constify snd_soc_component_driver struct (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: remove unused variable from acp platform driver (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: replace adata->platform conditional check (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: remove unused variable from acp_card_drvdata structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: update mach_params subsystem_rev field (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: pass acp pci revision id as platform data (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: store acp pci rev id in platform driver private structure (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: use acp pci revision id for platform differntiation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: use acp_rev for platform specific conditional checks (Jaroslav Kysela) [RHEL-80681]
  - ASoC: amd: acp: simplify platform conditional checks code (Jaroslav Kysela) [RHEL-80681]
  - ASoC: stm: fix macro definition on STM_SAI_HAS_EXT_SYNC (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_dai_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_link_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: remove unused substream in macro soc_component_mark_pop (Jaroslav Kysela) [RHEL-80681]
  - ASoC: improve macro definition on TWL4030_OUTPUT_PGA (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: mchp-spdiftx: Remove interface name from stream_name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: mchp-spdifrx: Remove interface name from stream_name (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: atmel_ssc_dai: Drop S24_LE support due to single channel limitation (Jaroslav Kysela) [RHEL-80681]
  - ASoC: atmel: atmel_ssc_dai: Add stream names (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity NTP8835 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add NeoFidelity NTP8835 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: dt-bindings: Add NeoFidelity NTP8918 (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity NTP8918 codec (Jaroslav Kysela) [RHEL-80681]
  - ASoC: codecs: Add NeoFidelity Firmware helpers (Jaroslav Kysela) [RHEL-80681]
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Jaroslav Kysela) [RHEL-80681]
  - loop: Fix use-after-free issues (Ming Lei) [RHEL-87488]
  - blk-cgroup: Fix class @block_class's subsystem refcount leakage (Ming Lei) [RHEL-81398] {CVE-2025-21745}
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei) [RHEL-80794]
  - treewide: Switch/rename to timer_delete[_sync]() (Kamal Heib) [RHEL-83218]
  - RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (Kamal Heib) [RHEL-83218]
  - rdma/cxgb4: Prevent potential integer overflow on 32bit (Kamal Heib) [RHEL-83218]
  - RDMA/cxgb4: Dump vendor specific QP details (Kamal Heib) [RHEL-83218]
  - xfrm: Fix the usage of skb->sk (Sabrina Dubroca) [RHEL-84576]
  - xfrm: delete intermediate secpath entry in packet offload mode (Sabrina Dubroca) [RHEL-84576]
  - xfrm: state: fix out-of-bounds read during lookup (Sabrina Dubroca) [RHEL-84576]
  - configs: add redhat/configs/common/generic/CONFIG_OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - redhat: make ENABLE_WERROR enable also OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - objtool: Add CONFIG_OBJTOOL_WERROR (Joe Lawrence) [RHEL-85302]
  - objtool: Create backup on error and print args (Joe Lawrence) [RHEL-85302]
  - objtool: Change "warning:" to "error:" for --Werror (Joe Lawrence) [RHEL-85302]
  - objtool: Add --Werror option (Joe Lawrence) [RHEL-85302]
  - objtool: Use O_CREAT with explicit mode mask (Joe Lawrence) [RHEL-85302]
  - objtool: Add --output option (Joe Lawrence) [RHEL-85302]
  - objtool: Fix error handling inconsistencies in check() (Joe Lawrence) [RHEL-85302]
  - x86/smp: Fix mwait_play_dead() and acpi_processor_ffh_play_dead() noreturn behavior [partial 2] (Joe Lawrence) [RHEL-85302]
  - virtgpu: don't reset on shutdown (Eric Auger) [RHEL-331]
  - virtio: break and reset virtio devices on device_shutdown() (Eric Auger) [RHEL-331]
  - efi: pstore: Return proper errors on UEFI failures (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Request at most 512 bytes for variable names (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Allow dynamic initialization based on module parameter (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Add module parameter for setting the record size (Lenny Szubowicz) [RHEL-2564]
  - efi: pstore: Omit efivars caching EFI varstore access layer (Lenny Szubowicz) [RHEL-2564]
  - efi: vars: Add thin wrapper around EFI get/set variable interface (Lenny Szubowicz) [RHEL-2564]
  - efi: vars: Don't drop lock in the middle of efivar_init() (Lenny Szubowicz) [RHEL-2564]
  - pstore: Add priv field to pstore_record for backend specific use (Lenny Szubowicz) [RHEL-2564]
  - selftests/sgx: Fix an enclave built with extended instructions (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Fix size overflows in sgx_encl_create() (Vladis Dronov) [RHEL-86442]
  - x86/sgx: Use vmalloc_array() instead of vmalloc() (Vladis Dronov) [RHEL-86442]
  - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88830]
  - ALSA: hda/tas2781: Fix index issue in tas2781 hda SPI driver (CKI Backport Bot) [RHEL-81726]
  - ALSA: hda/tas2781: Update tas2781 hda SPI driver (CKI Backport Bot) [RHEL-81726]
  - nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() (Benjamin Coddington) [RHEL-87724]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-584.el9]
changelog:
  - net: warn if NAPI instance wasn't shut down (Davide Caratti) [RHEL-77816]
  - net: hide the definition of dev_get_by_napi_id() (Davide Caratti) [RHEL-77816]
  - net: page_pool: don't try to stash the napi id (Davide Caratti) [RHEL-77816]
  - xsk: Bring back busy polling support (Davide Caratti) [RHEL-77816]
  - net: Make napi_hash_lock irq safe (Davide Caratti) [RHEL-77816]
  - netdev: prevent accessing NAPI instances from another namespace (Davide Caratti) [RHEL-77816] {CVE-2025-21659}
  - netdev-genl: Hold rcu_read_lock in napi_set (Davide Caratti) [RHEL-77816]
  - mlx4: Add support for persistent NAPI config to RX CQs (Davide Caratti) [RHEL-77816]
  - mlx5: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
  - bnxt: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
  - netdev-genl: Support setting per-NAPI config values (Davide Caratti) [RHEL-77816]
  - net: napi: Add napi_config (Davide Caratti) [RHEL-77816]
  - netdev-genl: Dump gro_flush_timeout (Davide Caratti) [RHEL-77816]
  - net: napi: Make gro_flush_timeout per-NAPI (Davide Caratti) [RHEL-77816]
  - netdev-genl: Dump napi_defer_hard_irqs (Davide Caratti) [RHEL-77816]
  - net: napi: Make napi_defer_hard_irqs per-NAPI (Davide Caratti) [RHEL-77816]
  - x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-88224]
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-88224]
  - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-88224]
  - x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-88224]
  - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Waiman Long) [RHEL-88224]
  - x86/bugs: Skip RSB fill at VMEXIT (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Waiman Long) [RHEL-88224]
  - x86/bugs: Fix handling when SRSO mitigation is disabled (Waiman Long) [RHEL-88224]
  - x86/bugs: Add missing NO_SSB flag (Waiman Long) [RHEL-88224]
  - Documentation/srso: Document a method for checking safe RET operates properly (Waiman Long) [RHEL-88224]
  - redhat/configs: Add new CONFIG_MITIGATION_* kconfig files (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for GDS (Waiman Long) [RHEL-88224]
  - x86/bugs: Remove GDS Force Kconfig option (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for SSB (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for Spectre V2 (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for SRBDS (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for Spectre v1 (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for RETBLEED (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for L1TF (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for MMIO Stable Data (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for TAA (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for MDS (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Flip the /proc/cpuinfo appearance logic (Waiman Long) [RHEL-88224]
  - x86/bugs: Add 'spectre_bhi=vmexit' cmdline option (Waiman Long) [RHEL-88224]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
  - x86/cpu: Use EXPORT_PER_CPU_SYMBOL_GPL() for x86_spec_ctrl_current (Waiman Long) [RHEL-88224]
  - linux/dim: Fix divide by 0 in RDMA DIM (CKI Backport Bot) [RHEL-80826] {CVE-2022-49670}
  - scsi: megaraid_sas: Driver version update to 07.734.00.00-rc1 (Chandrakanth Patil) [RHEL-80700]
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [RHEL-80700]
  - scsi: megaraid_sas: Make most module parameters static (Chandrakanth Patil) [RHEL-80700]
  - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-88421]
  - ibmvnic: Don't reference skb after sending to VIOS (Mamatha Inamdar) [RHEL-83359] {CVE-2025-21855}
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition (CKI Backport Bot) [RHEL-88783] {CVE-2025-22056}
  - iommu/amd: Fix header file (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Fix possible circular locking dependency (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add the document for Intel IOMMU debugfs (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Jerry Snitselaar) [RHEL-78704]
  - drm/tegra: Fix NULL vs IS_ERR() check in probe() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_iommu_drain_pasid_prq() cover faults for RID (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix a spelling error (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix potential memory leak in iopf_queue_remove_device() (Jerry Snitselaar) [RHEL-78704]
  - iommu/hyper-v: Don't assume cpu_possible_mask is dense (Jerry Snitselaar) [RHEL-78704]
  - iommufd: Keep OBJ/IOCTL lists in an alphabetical order (Jerry Snitselaar) [RHEL-78705]
  - iommufd: Deal with IOMMU_HWPT_FAULT_ID_VALID in iommufd core (Jerry Snitselaar) [RHEL-78708]
  - iommufd/selftest: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78708]
  - iommu/amd: Fully decode all combinations of alloc_paging_flags (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Move the nid to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Change amd_iommu_pgtable to use enum protection_domain_mode (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove type argument from do_iommu_domain_alloc() and related (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove dev == NULL checks (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove unused amd_iommu_domain_update() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: remove return value of amd_iommu_detect (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove amd_iommu_apply_erratum_63() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Modify clear_dte_entry() to avoid in-place update (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce helper function get_dte256() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce helper function to update 256-bit DTE (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Misc ACPI IVRS debug info clean up (Jerry Snitselaar) [RHEL-75906]
  - iommu/vt-d: Link cache tags of same iommu unit together (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove iommu cap audit (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Jerry Snitselaar) [RHEL-78704]
  - iommu: Use str_enable_disable-like helpers (Jerry Snitselaar) [RHEL-78704]
  - lib/string_choices: Add some comments to make more clear for string choices helpers. (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Introduce several opposite string choice helpers (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Add str_true_false()/str_false_true() helper (Jerry Snitselaar) [RHEL-78705]
  - string_choices: Add wrapper for str_down_up() (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Add str_up_down() helper (Jerry Snitselaar) [RHEL-78705]
  - iommu: Remove the remove_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78705]
  - iommu: Detaching pasid by attaching to the blocked_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu: Consolidate the ops->remove_dev_pasid usage into a helper (Jerry Snitselaar) [RHEL-78704]
  - iommu: Prevent pasid attach if no ops->remove_dev_pasid (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Add missing #include of linux/string_choices.h (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Use str_read_write helper w/ logs (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add way to debug pgtable walk (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Re-use the pgtable walk for iova_to_phys (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Make pgtable walker more generic (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Add ACTLR data and support for qcom_smmu_500 (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Introduce ACTLR custom prefetcher settings (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Add support for PRR bit setup (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Refactor qcom_smmu structure to include single pointer (Jerry Snitselaar) [RHEL-78705]
  - redhat/configs: enable ARM_SMMU_MMU_500_CPRE_ERRATA (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Re-enable context caching in smmu reset operation (Jerry Snitselaar) [RHEL-78705]
  - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix cfg reading in arm_lpae_concat_mandatory() (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add coverage for different OAS in selftest (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix stage-2 concatenation with 16K (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Make domain_alloc_paging_flags() directly determine the S1/S2 (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Remove arm_smmu_domain_finalise() during attach (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Document SVA interaction with new pagetable features (Jerry Snitselaar) [RHEL-78705]
  - arm64: add stubs for system_supports_poe and system_supports_gcs (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmuv3: Update comments about ATS and bypass (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Log better event records (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_event (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible (Jerry Snitselaar) [RHEL-78705]
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Avoid draining PRQ in sva mm release path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add lockdep asserts for domain->dev_list (Jerry Snitselaar) [RHEL-78704]
  - scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Improve uAPI comment for IOMMU_HW_INFO_TYPE_ARM_SMMUV3 (Jerry Snitselaar) [RHEL-78705]
  - iommufd/selftest: Cover IOMMU_FAULT_QUEUE_ALLOC in iommufd_fail_nth (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Fix typos in kernel-doc comments (Jerry Snitselaar) [RHEL-78708]
  - iommu: Rename ops->domain_alloc_user() to domain_alloc_paging_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Add ops->domain_alloc_nested() (Jerry Snitselaar) [RHEL-78704]
  - scatterlist: fix a typo (Jerry Snitselaar) [RHEL-78704]
  - kmemleak: iommu/iova: fix transient kmemleak false positive (Jerry Snitselaar) [RHEL-78704]
  - iommu: Make set_dev_pasid op support domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Make set_dev_pasid() op support replace (Jerry Snitselaar) [RHEL-78705]
  - iommu/vt-d: Add set_dev_pasid callback for nested domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make identity_domain_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_svm_set_dev_pasid() support domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Limit intel_iommu_set_dev_pasid() for paging domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_iommu_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add iommu_domain_did() to get did (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Consolidate the struct dev_pasid_info add/remove (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add pasid replace helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refactor the pasid setup helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add a helper to flush cache for updating present pasid entry (Jerry Snitselaar) [RHEL-78704]
  - iommu: Pass old domain to set_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drain PRQs when domain removed from RID (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drop pasid requirement for prq initialization (Jerry Snitselaar) [RHEL-78704]
  - iommufd: Enable PRI when doing the iommufd_hwpt_alloc (Jerry Snitselaar) [RHEL-78708]
  - iommu/vt-d: Move IOMMU_IOPF into INTEL_IOMMU (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove the pasid present check in prq_event_thread (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Separate page request queue from SVM (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drop s1_pgtbl from dmar_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove unused dmar_msi_read (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Increase buffer size for device name (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Use PCI_DEVID() macro (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refine intel_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refactor first_level_by_default() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_update_iommu_superpage() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_update_iommu_cap() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Enhance compatibility check for paging domain attach (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove unused domain_alloc callback (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add domain_alloc_paging support (Jerry Snitselaar) [RHEL-78704]
  - iommu/iova: Fix typo 'adderss' (Jerry Snitselaar) [RHEL-78704]
  - iommu: Create __iommu_alloc_identity_domain() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Put domain allocation in __iommu_group_alloc_blocking_domain() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Put list_add/del(dev_data) back under the domain->lock (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Improve amd_iommu_release_device() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add ops->release_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Reorder attach device code (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Convert dev_data lock from spinlock to mutex (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Rearrange attach device code (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Reduce domain lock scope in attach device path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Do not detach devices in domain free path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove unused amd_iommus variable (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: xarray to track protection_domain->iommu list (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove protection_domain.dev_cnt variable (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Use ida interface to manage protection domain ID (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Fix corruption when mapping large pages from 0 (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Do not try copy old DTE resume path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Use atomic64_inc_return() in iommu.c (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Implement global identity domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Enhance amd_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Pass page table type as param to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Separate page table setup from domain allocation (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Move V2 page table support check to early_amd_iommu_init() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add helper function to check GIOSUP/GTSUP (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Enhance domain_alloc_user() to allocate PASID capable domain (Jerry Snitselaar) [RHEL-78705]
  - iommu: Add new flag to explictly request PASID capable domain (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix prototype of iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Introduce iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Refactor __iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - remoteproc: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - drm/nouveau/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - gpu: host1x: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - drm/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Restore iommu_flush_iotlb_all() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove useless flush from iommu_create_device_direct_mappings() (Jerry Snitselaar) [RHEL-78704]
  - iommu/sysfs: constify the class struct (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove iommu_present() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Reorganize kerneldoc parameter names (Jerry Snitselaar) [RHEL-78704]
  - iommu: Make bus_iommu_probe() static (Jerry Snitselaar) [RHEL-78704]
  - iommu: Add a kdoc to iommu_unmap() (Jerry Snitselaar) [RHEL-78704]
  - iommu/io-pgtable-arm: Remove split on unmap behavior (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add self test for the last page in the IAS (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Import IOMMUFD module namespace (Jerry Snitselaar) [RHEL-55204]
  - iommufd: IOMMU_IOAS_CHANGE_PROCESS selftest (Jerry Snitselaar) [RHEL-78708]
  - selftests: iommu: Use installed kernel headers search path (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Add IOMMU_IOAS_CHANGE_PROCESS (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Lock all IOAS objects (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Export do_update_pinned (Jerry Snitselaar) [RHEL-78708]
  - iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Use S2FWB for NESTED domains (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Expose the arm_smmu_attach interface (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT (Jerry Snitselaar) [RHEL-55204]
  - redhat/configs: Enable CONFIG_ARM_SMMU_V3_IOMMUFD (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS (Jerry Snitselaar) [RHEL-55204]
  - ACPI/IORT: Support CANWBS memory access flag (Jerry Snitselaar) [RHEL-55204]
  - ACPICA: IORT: Update for revision E.f (Jerry Snitselaar) [RHEL-55204]
  - vfio: Remove VFIO_TYPE1_NESTING_IOMMU (Jerry Snitselaar) [RHEL-78708]
  - Documentation: userspace-api: iommufd: Update vDEVICE (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add mock_viommu_cache_invalidate (Jerry Snitselaar) [RHEL-73590]
  - iommufd/viommu: Add iommufd_viommu_find_dev helper (Jerry Snitselaar) [RHEL-73590]
  - iommu: Add iommu_copy_struct_from_full_user_array helper (Jerry Snitselaar) [RHEL-73590]
  - iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE (Jerry Snitselaar) [RHEL-73590]
  - iommu/viommu: Add cache_invalidate to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage (Jerry Snitselaar) [RHEL-73590]
  - iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl (Jerry Snitselaar) [RHEL-73590]
  - Documentation: userspace-api: iommufd: Update vIOMMU (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add refcount to mock_iommu_device (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested() (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add container_of helpers (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Add alloc_domain_nested op to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-55217]
  - iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Verify object in iommufd_object_finalize/abort() (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Move _iommufd_object_alloc helper to a sharable file (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Move struct iommufd_object to public iommufd header (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Allow fault reporting for non-PRI PCI devices (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Selftest coverage for IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
  - iommufd: File mappings for mdev (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Add IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
  - iommufd: pfn_reader for file mappings (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Folio subroutines (Jerry Snitselaar) [RHEL-78708]
  - iommufd: pfn_reader local variables (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Generalize iopt_pages address (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Rename uptr in iopt_alloc_iova() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: Add folio_add_pins() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: handle NULL pages in unpin_user_pages() (Jerry Snitselaar) [RHEL-78708] {CVE-2024-56612}
  - mm/gup: avoid an unnecessary allocation call for FOLL_LONGTERM cases (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: stop leaking pinned pages in low memory conditions (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: simplify refs in memfd_alloc_folio (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: fix memfd_pin_folios alloc race panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49872}
  - mm/gup: fix memfd_pin_folios hugetlb page allocation (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: fix memfd_pin_folios free_huge_pages leak (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49964}
  - mm/filemap: fix filemap_get_folios_contig THP panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49873}
  - mm/gup: introduce memfd_pin_folios() for pinning memfd folios (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: introduce check_and_migrate_movable_folios() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: introduce unpin_folio/unpin_folios helpers (Jerry Snitselaar) [RHEL-78708]
  - Documentation: userspace-api: iommufd: Update HWPT_PAGING and HWPT_NESTED (Jerry Snitselaar) [RHEL-78708]
  - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: drop unneeded includes from dma-mapping.h (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: trace more error paths (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: trace dma_alloc/free direction (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: use macros to define events in a class (Jerry Snitselaar) [RHEL-78704]
  - redhat/configs: Remove CONFIG_DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: remove DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: fix physical address calculation for struct dma_debug_entry (Jerry Snitselaar) [RHEL-78708]
  - dma-debug: store a phys_addr_t in struct dma_debug_entry (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: fix a possible deadlock on radix_lock (Jerry Snitselaar) [RHEL-78704] {CVE-2024-47143}
  - docs/core-api: swiotlb: fix typos (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu: Clarify MMU-500 CPRE workaround (Jerry Snitselaar) [RHEL-78705]
  - iommu/vt-d: Cleanup apic_printk() (Jerry Snitselaar) [RHEL-78704]
  - x86/apic: Provide apic_printk() helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu: Manage driver probe deferral better (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Clean up more on probe failure (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Retire probe deferral workaround (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Make instance lookup robust (Jerry Snitselaar) [RHEL-78705]
  - kselftest/arm64: signal: drop now redundant GNU_SOURCE definition (Jerry Snitselaar) [RHEL-78704]
  - selftests: mptcp: extend CFLAGS to keep options from environment (Jerry Snitselaar) [RHEL-78704]
  - selftests: centralize -D_GNU_SOURCE= to CFLAGS in lib.mk (Jerry Snitselaar) [RHEL-78704]
  - of: address: always use dma_default_coherent for default coherency (Jerry Snitselaar) [RHEL-78704]
  - of: also handle dma-noncoherent in of_dma_is_coherent() (Jerry Snitselaar) [RHEL-78704]
  - virtio/vsock: Fix accept_queue memory leak (Jon Maloy) [RHEL-69713] {CVE-2024-53119}
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Xin Long) [RHEL-77314] {CVE-2025-21647}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CKI Backport Bot) [RHEL-86841] {CVE-2025-21993}
  - page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Høiland-Jørgensen) [RHEL-76845]
  - page_pool: Move pp_magic check into helper functions (Toke Høiland-Jørgensen) [RHEL-76845]
  - media: v4l2-mediabus: Drop V4L2_MBUS_CSI2_CONTINUOUS_CLOCK flag (Kate Hsuan) [RHEL-85049]
  - media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_CHANNEL_* flags (Kate Hsuan) [RHEL-85049]
  - media: v4l2-mediabus: Use structures to describe bus configuration (Kate Hsuan) [RHEL-85049]
  - media: v4l2-fwnode: Move bus config structure to v4l2_mediabus.h (Kate Hsuan) [RHEL-85049]
  - mm/gup: Refuse VM_PFNMAP in follow_page() (Donald Dutile) [RHEL-87404]
  - net: tun: unlink NAPI from device on destruction (CKI Backport Bot) [RHEL-80840] {CVE-2022-49672}
  - ata: libata-scsi: Improve CDL control (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Fix ata_msense_control_ata_feature() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Tomas Henzl) [RHEL-72596]
  - ata: libata-sata: Save all fields from sense data descriptor (Tomas Henzl) [RHEL-72596]
  - ata: libata: Fix NCQ Non-Data log not supported print (Tomas Henzl) [RHEL-72596]
  - ata: libata: Improve return value of atapi_check_dma() (Tomas Henzl) [RHEL-72596]
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Tomas Henzl) [RHEL-72596]
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Tomas Henzl) [RHEL-72596]
  - ata: sata_gemini: Remove unused gemini_sata_reset_bridge() (Tomas Henzl) [RHEL-72596]
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Tomas Henzl) [RHEL-72596]
  - ata: Constify struct pci_device_id (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Document all VPD page inquiry actors (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor ata_scsiop_maint_in() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor ata_scsi_simulate() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor scsi_6_lba_len() with use of get_unaligned_be24() (Tomas Henzl) [RHEL-72596]
  - ata: Fix typos in the comment (Tomas Henzl) [RHEL-72596]
  - net: fib_rules: Fix iif / oif matching on L3 master device (Antoine Tenart) [RHEL-84584]
  - net: fib_rules: annotate data-races around rule->[io]ifindex (Antoine Tenart) [RHEL-84584]
  - net: Remove likely from l3mdev_master_ifindex_by_index (Antoine Tenart) [RHEL-84584]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-585.el9]
changelog:
  - dmaengine: amd: qdma: Remove using the private get and set dma_ops APIs (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: Revert "dmaengine: qcom: bam_dma: Avoid writing unavailable register" (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Enable Function Level Reset (FLR) for halt (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Refactor halt handler (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add idxd_device_config_save() and idxd_device_config_restore() helpers (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Binding and unbinding IDXD device and driver (Jerry Snitselaar) [RHEL-78706]
  - bitmap: Define a cleanup function for bitmaps (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add idxd_pci_probe_alloc() helper (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: qcom: gpi: Add GPI immediate DMA support for SPI protocol (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: bcm2835-dma: Prevent suspend if DMA channel is busy (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: k3-udma: Add support for J722S CSI BCDMA (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: edma: make the loop condition simpler in edma_probe() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: qcom: bam_dma: Avoid writing unavailable register (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Remove unused idxd_(un)register_bus_type (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add a new IAA device ID on Panther Lake family platforms (Jerry Snitselaar) [RHEL-47414]
  - dmaengine: sh: rcar-dmac: add comment for r8a779a0 compatible (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: Move AMD PTDMA driver to amd directory (Jerry Snitselaar) [RHEL-78706]
  - redhat/configs: Add CONFIG_AMD_QDMA (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: amd: qdma: Add AMD QDMA driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Remove a useless mutex (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: fix typo in the comment (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Move DSA/IAA device IDs to IDXD driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Clean up headers (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Simplify devm_acpi_dma_controller_register() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Drop unused devm_acpi_dma_controller_free() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: rz-dmac: add r7s72100 support (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: Kconfig: Make RZ_DMAC depend on ARCH_RZG2L (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: Kconfig: Add ARCH_R9A07G054 dependency for RZ_DMAC config option (Jerry Snitselaar) [RHEL-78706]
  - nvme: print firmware bug note for non-unique identifiers (Bryan Gurney) [RHEL-89350]
  - nvme-pci: add BOGUS_NID quirk for Samsung PM1733 (Bryan Gurney) [RHEL-89350]
  - vsock: Orphan socket after transport release (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - vsock: Keep the binding until socket destruction (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - bpf, vsock: Invoke proto::close on close() (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - RDMA/rxe: Fix the qp flush warnings in req (CKI Backport Bot) [RHEL-72373] {CVE-2024-53229}
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Guillaume Nault) [RHEL-89647] {CVE-2025-37749}
  - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (David Arcari) [RHEL-81770]
  - ext4: fix OOB read when checking dotdot dir (CKI Backport Bot) [RHEL-87984] {CVE-2025-37785}
  - ionic: add module eeprom channel data to ionic_if and ethtool (Mohammad Heib) [RHEL-88150]
  - ionic: support ethtool get_module_eeprom_by_page (Mohammad Heib) [RHEL-88150]
  - ionic: extend the QSFP module sprom for more pages (Mohammad Heib) [RHEL-88150]
  - ionic: use ee->offset when returning sprom data (Mohammad Heib) [RHEL-88150]
  - ionic: no double destroy workqueue (Mohammad Heib) [RHEL-88150]
  - ionic: Fix netdev notifier unregister on failure (Mohammad Heib) [RHEL-88150]
  - ionic: remove the unused nb_work (Mohammad Heib) [RHEL-88150]
  - ionic: add support for QSFP_PLUS_CMIS (Mohammad Heib) [RHEL-88150]
  - ionic: add speed defines for 200G and 400G (Mohammad Heib) [RHEL-88150]
  - ionic: Translate IONIC_RC_ENOSUPP to EOPNOTSUPP (Mohammad Heib) [RHEL-88150]
  - ionic: Use VLAN_ETH_HLEN when possible (Mohammad Heib) [RHEL-88150]
  - ionic: add asic codes to firmware interface file (Mohammad Heib) [RHEL-88150]
  - hugetlbfs: support idmapped mounts (CKI Backport Bot) [RHEL-35573]
  - redhat: create 'systemd-volatile-overlay' addon for UKI (Emanuele Giuseppe Esposito) [RHEL-86487]
  - efi: Fix building of efi-pstore when CONFIG_EFI_VARS_PSTORE=m (Lenny Szubowicz) [RHEL-90260]
  - ACPI: processor idle: Revert "avoid call to raw_local_irq_disable() from acpi_safe_halt()" (Waiman Long) [RHEL-22238]
  - ACPI/HMAT: Move HMAT messages to pr_debug() (Steve Dunnagan) [RHEL-70321]
  - cpufreq: Reference count policy in cpufreq_update_limits() (David Arcari) [RHEL-67849]
  - cpufreq/amd-pstate: Use scope based cleanup for cpufreq_policy refs [partial] (David Arcari) [RHEL-67849]
  - platform/x86/amd: amd_3d_vcache: Add sysfs ABI documentation (David Arcari) [RHEL-67849]
  - platform/x86/amd: amd_3d_vcache: Add AMD 3D V-Cache optimizer driver (David Arcari) [RHEL-67849]
  - redhat/configs: enable CONFIG_AMD_3D_VCACHE for x86 on RHEL (David Arcari) [RHEL-67849]
  - enic: get max rq & wq entries supported by hw, 16K queues (Nelson Escobar) [RHEL-84862]
  - enic: cleanup of enic wq request completion path (Nelson Escobar) [RHEL-84862]
  - enic: added enic_wq.c and enic_wq.h (Nelson Escobar) [RHEL-84862]
  - enic: remove unused function cq_enet_wq_desc_dec (Nelson Escobar) [RHEL-84862]
  - enic: enable rq extended cq support (Nelson Escobar) [RHEL-84862]
  - enic: enic rq extended cq defines (Nelson Escobar) [RHEL-84862]
  - enic: enic rq code reorg (Nelson Escobar) [RHEL-84862]
  - enic: Move function from header file to c file (Nelson Escobar) [RHEL-84862]
  - enic: add dependency on Page Pool (Nelson Escobar) [RHEL-84862]
  - enic: remove copybreak tunable (Nelson Escobar) [RHEL-84862]
  - enic: Use the Page Pool API for RX (Nelson Escobar) [RHEL-84862]
  - enic: Simplify RX handler function (Nelson Escobar) [RHEL-84862]
  - enic: Move RX functions to their own file (Nelson Escobar) [RHEL-84862]
  - enic: Fix typo in comment in table indexed by link speed (Nelson Escobar) [RHEL-84862]
  - enic: Obtain the Link speed only after the link comes up (Nelson Escobar) [RHEL-84862]
  - enic: Move RX coalescing set function (Nelson Escobar) [RHEL-84862]
  - enic: Move kdump check into enic_adjust_resources() (Nelson Escobar) [RHEL-84862]
  - enic: Move enic resource adjustments to separate function (Nelson Escobar) [RHEL-84862]
  - enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (Nelson Escobar) [RHEL-84862]
  - enic: Allocate arrays in enic struct based on VIC config (Nelson Escobar) [RHEL-84862]
  - enic: Save resource counts we read from HW (Nelson Escobar) [RHEL-84862]
  - enic: Make MSI-X I/O interrupts come after the other required ones (Nelson Escobar) [RHEL-84862]
  - enic: Create enic_wq/rq structures to bundle per wq/rq data (Nelson Escobar) [RHEL-84862]
  - enic: Report some per queue statistics in ethtool (Nelson Escobar) [RHEL-84862]
  - enic: Report per queue statistics in netdev qstats (Nelson Escobar) [RHEL-84862]
  - enic: Collect per queue statistics (Nelson Escobar) [RHEL-84862]
  - enic: Use macro instead of static const variables for array sizes (Nelson Escobar) [RHEL-84862]
  - enic: add ethtool get_channel support (Nelson Escobar) [RHEL-84862]
  - enic: Validate length of nl attributes in enic_set_vf_port (Nelson Escobar) [RHEL-84862]
  - enic: Replace hardcoded values for vnic descriptor by defines (Nelson Escobar) [RHEL-84862]
  - enic: Avoid false positive under FORTIFY_SOURCE (Nelson Escobar) [RHEL-84862]
  - smb: client: Add check for next_buffer in receive_encrypted_standard() (CKI Backport Bot) [RHEL-83243] {CVE-2025-21844}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-586.el9]
changelog:
  - net: introduce per netns packet chains (Paolo Abeni) [RHEL-88921]
  - nvme: enable CONFIG_NVME_KEYRING (Maurizio Lombardi) [RHEL-72531]
  - nvmet-auth: always free derived key data (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix out-of-bounds access in nvmet_enable_port (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: cleanup link state management (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: clear CC and CSTS when disabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: always fully initialize completion entries (Maurizio Lombardi) [RHEL-72531]
  - nvmet: auth: use NULL to clear a pointer in nvmet_auth_sq_free() (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: sysfs links may not be created for devices (Maurizio Lombardi) [RHEL-72531]
  - nvme: fixup scan failure for non-ANA multipath controllers (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: take tgtport reference only once (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: update tgtport ref per assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_free_hostport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_delete_assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: add ref counting to lport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: replace kref with refcount (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: swap list_add_tail arguments (Maurizio Lombardi) [RHEL-72531]
  - nvme: multipath: fix return value of nvme_available_path (Maurizio Lombardi) [RHEL-72531]
  - nvme: re-read ANA log page after ns scan completes (Maurizio Lombardi) [RHEL-72531]
  - nvme: requeue namespace scan on missed AENs (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-72531]
  - crypto,fs: Separate out hkdf_extract() and hkdf_expand() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: disable the target pci-epf module (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip nvme_write_sq_db on empty rqlist (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Keep completion queues mapped (Maurizio Lombardi) [RHEL-72531]
  - objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace max(a, min(b, c)) by clamp(val, lo, hi) (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Always configure BAR0 as 64-bit (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Remove duplicate uuid_copy (Maurizio Lombardi) [RHEL-72531]
  - nvme: zns: Simplify nvme_zone_parse_entry() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Remove redundant 'flush_workqueue()' calls (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: Remove unused functions (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove stale comment (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: Utilise min3() to simplify queue count calculation (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for queue-depth io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for numa io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for round-robin io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tls_concat and tls_key debugfs entries (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet-tcp: support secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet: Add 'sq' argument to alloc_ctrl_args (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-fabrics: reset admin connection for secure concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-tcp: request secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-keyring: add nvme_tls_psk_refresh() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_derive_tls_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_digest() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: map uring_cmd data even if address is 0 (Maurizio Lombardi) [RHEL-72531]
  - io_uring/nvme: pass issue_flags to io_uring_cmd_import_fixed() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not add an IRQ vector if not needed (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Set NVMET_PCI_EPF_Q_LIVE when a queue is fully created (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix stuck reset on concurrent DPC and HP (Maurizio Lombardi) [RHEL-72531]
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Maurizio Lombardi) [RHEL-72531 RHEL-86914] {CVE-2025-21927}
  - nvme-tcp: Fix a C2HTermReq error message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: remove old function prototype (Maurizio Lombardi) [RHEL-72531]
  - nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: clean up CMBMSC when registering CMB fails (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix possible UAF in nvme_tcp_poll (Maurizio Lombardi) [RHEL-72531]
  - nvme: only allow entering LIVE from CONNECTING state (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: rely on state transitions to handle connectivity loss (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Support coprocessors left idle (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Release power domains when probe fails (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: add missing space in err message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Avoid RCU stalls under heavy workload (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not uselessly write the CSTS register (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Correctly initialize CSTS when enabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Fix crash when a namespace is disabled (Maurizio Lombardi) [RHEL-72531 RHEL-73614 RHEL-85327] {CVE-2025-21850}
  - nvme-tcp: add basic support for the C2HTermReq PDU (Maurizio Lombardi) [RHEL-72531]
  - nvme: make nvme_tls_attrs_group static (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add a missing endianess conversion in nvmet_execute_admin_connect (Maurizio Lombardi) [RHEL-72531]
  - nvmet: the result field in nvmet_alloc_ctrl_args is little endian (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix a memory leak in controller identify (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: do not ignore connectivity loss during connecting (Maurizio Lombardi) [RHEL-72531]
  - nvme: handle connectivity loss in nvme_set_queue_count (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: go straight to connecting state when initializing (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove redundant dma frees in hmb (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix rw control endian access (Maurizio Lombardi) [RHEL-72531]
  - nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use correct size to free the hmb buffer (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error path for xa_store in nvme_init_effects (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix comment typo (Maurizio Lombardi) [RHEL-72531]
  - nvmet: New NVMe PCI endpoint function target driver (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement arbitration feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt config feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt coalescing feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement host identifier set feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce get/set_feature controller operations (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Do not require SGL for PCI target controller commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add support for I/O queue management admin commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_sq_create() and nvmet_cq_create() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_req_transfer_len() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Improve nvmet_alloc_ctrl() interface and implementation (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add PCI transport type (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add drvdata field to struct nvmet_ctrl (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_get_cmd_effects_admin() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Export nvmet_update_cc() and nvmet_cc_xxx() helpers (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add vendor_id and subsys_vendor_id subsystem attributes (Maurizio Lombardi) [RHEL-72531]
  - nvme: Move opcode string helper functions declarations (Maurizio Lombardi) [RHEL-72531]
  - nvme: change return type of nvme_poll_cq() to bool (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error check for xa_store in nvme_get_effects_log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: handle rw's limited retry flag (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: remove nvme_tcp_destroy_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvmet-loop: avoid using mutex in IO hotpath (Maurizio Lombardi) [RHEL-72531]
  - nvmet: propagate npwg topology (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: 512 byte aligned dma pool segment quirk (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: simplify nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: no need to quiesce admin_q in nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix the memleak while create new ctrl failed (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56632}
  - nvme-pci: don't use dma_alloc_noncontiguous with 0 merge boundary (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace kmalloc + memset with kzalloc for data allocation (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove two deallocate zeroes quirks (Maurizio Lombardi) [RHEL-72531]
  - nvme: don't apply NVME_QUIRK_DEALLOCATE_ZEROES when DSM is not supported (Maurizio Lombardi) [RHEL-72531]
  - nvmet: use kzalloc instead of ZERO_PAGE in nvme_execute_identify_ns_nvm() (Maurizio Lombardi) [RHEL-72531]
  - nvme: tuning pr code by using defined structs and macros (Maurizio Lombardi) [RHEL-72531]
  - nvme: introduce change ptpl and iekey definition (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tracing of reservation commands (Maurizio Lombardi) [RHEL-72531]
  - nvme: parse reservation commands's action and rtype to string (Maurizio Lombardi) [RHEL-72531]
  - nvmet: report ns's vwc not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: check ns's volatile write cache not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: add rotational support (Maurizio Lombardi) [RHEL-72531]
  - nvme: use command set independent id ns if available (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support for csi identify ns (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement rotational media information log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement endurance groups (Maurizio Lombardi) [RHEL-72531]
  - nvmet: declare 2.1 version compliance (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement crto property (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported features log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported log pages (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement active command set ns list (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement id ns for nvm command set (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support reservation feature (Maurizio Lombardi) [RHEL-72531]
  - nvme-core: remove repeated wq flags (Maurizio Lombardi) [RHEL-72531]
  - nvmet: make nvmet_wq visible in sysfs (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use dma_alloc_noncontigous if possible (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix freeing of the HMB descriptor table (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56756}
  - nvme: re-fix error-handling for io_uring nvme-passthrough (Maurizio Lombardi) [RHEL-72531]
  - nvme: module parameter to disable pi with offsets (Maurizio Lombardi) [RHEL-72531]
  - nvme: enhance cns version checking (Maurizio Lombardi) [RHEL-72531]
  - vfs: fix race between evice_inodes() and find_inode()&iput() (CKI Backport Bot) [RHEL-63193] {CVE-2024-47679}
  - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-86831]
  - proc: fix UAF in proc_get_inode() (Ian Kent) [RHEL-86809] {CVE-2025-21999}
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (David Marlin) [RHEL-87889] {CVE-2025-21969}
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CKI Backport Bot) [RHEL-87889] {CVE-2025-21969}
  - scsi: mpi3mr: Event processing debug improvement (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Add level check to control event logging (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Reset the pending interrupt flag (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix pending I/O counter (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Task Abort EH Support (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.13.0.5.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Check admin reply queue from Watchdog (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update timestamp only for supervisor IOCs (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update MPI Headers to revision 35 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix locking in an error path (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix spelling mistake "skiping" -> "skipping" (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.12.1.0.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page1: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page0: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_pcie_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_sas_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (CKI Backport Bot) [RHEL-79805]
  - PCI: Use downstream bridges for distributing resources (Myron Stowe) [RHEL-73396]
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Gavin Shan) [RHEL-87960]
  - s390/qdio: Move memory alloc/pointer arithmetic for slib and sl into one place (Mete Durlu) [RHEL-73492]
  - s390/qdio: Rename feature flag aif_osa to aif_qdio (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Clarify zfcp_port refcount ownership during "link" test (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Correct kdoc parameter description for sending ELS and CT (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Switch over to sysfs_emit() (Mete Durlu) [RHEL-73492]
  - s390: Add z17 elf platform (Mete Durlu) [RHEL-89726]
  - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-89579]
  - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-89579]
  - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-89579]
  - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-89579]
  - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-89579]
  - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-89579]
  - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-89579]
  - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-89579]
  - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-89579]
  - mptcp: fix spurious wake-up on under memory pressure (Davide Caratti) [RHEL-84571]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Davide Caratti) [RHEL-84571] {CVE-2025-23145}
  - mptcp: Fix data stream corruption in the address announcement (Davide Caratti) [RHEL-84571]
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Davide Caratti) [RHEL-84571] {CVE-2025-21938}
  - mptcp: always handle address removal under msk socket lock (Davide Caratti) [RHEL-84571] {CVE-2025-21875}
  - mptcp: handle fastopen disconnect correctly (Davide Caratti) [RHEL-84571] {CVE-2025-21705}
  - mptcp: consolidate suboption status (Davide Caratti) [RHEL-84571] {CVE-2025-21707}
  - mptcp: be sure to send ack when mptcp-level window re-opens (Davide Caratti) [RHEL-84571]
  - mptcp: pm: only set fullmesh for subflow endp (Davide Caratti) [RHEL-84571] {CVE-2025-21706}
  - mptcp: hold pm lock when deleting entry (Davide Caratti) [RHEL-84571]
  - mptcp: prevent MPC handshake on port-based signal endpoints (Davide Caratti) [RHEL-84571]
  - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-81397] {CVE-2025-21764}
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Fix fifo underflow on flush (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Adjust the timeout for FIFO mode (Derek Barbosa) [RHEL-89346]
  - tty: serial: 8250: Fix another runtime PM usage counter underflow (Derek Barbosa) [RHEL-89346]
  - Flush console log from kernel_power_off() (Derek Barbosa) [RHEL-89346]
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Derek Barbosa) [RHEL-89346]
  - dev_printk: Add and use dev_no_printk() (Derek Barbosa) [RHEL-89346]
  - printk: Let no_printk() use _printk() (Derek Barbosa) [RHEL-89346]
  - printk: index: Add indexing support to dev_printk (Derek Barbosa) [RHEL-89346]
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Waiman Long) [RHEL-72448]
  - rtc: rzn1: fix BCD to rtc_time conversion errors (Waiman Long) [RHEL-72448]
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Waiman Long) [RHEL-72448] {CVE-2024-56739}
  - rtc: abx80x: Fix WDT bit position of the status register (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Waiman Long) [RHEL-72448]
  - rtc: at91sam9: fix OF node leak in probe() error path (Waiman Long) [RHEL-72448]
  - rtc: interface: Add RTC offset to alarm after fix-up (Waiman Long) [RHEL-72448]
  - rtc: abx80x: Fix return value of nvmem callback on read (Waiman Long) [RHEL-72448]
  - rtc: cmos: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: isl1208: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Waiman Long) [RHEL-72448]
  - rtc: Extend timeout for waiting for UIP to clear to 1s (Waiman Long) [RHEL-72448]
  - rtc: Add support for configuring the UIP timeout for RTC reads (Waiman Long) [RHEL-72448]
  - rtc: Adjust failure return code for cmos_set_alarm() (Waiman Long) [RHEL-72448]
  - rtc: mc146818-lib: Adjust failure return code for mc146818_get_time() (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call (Waiman Long) [RHEL-72448]
  - rtc: efi: fixed typo in efi_procfs() (Waiman Long) [RHEL-72448]
  - rtc: brcmstb-waketimer: support level alarm_irq (Waiman Long) [RHEL-72448]
  - rtc: stop warning for invalid alarms when the alarm is disabled (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: Allow to wake up system without IRQ (Waiman Long) [RHEL-72448]
  - rtc: rv8803: fix Wvoid-pointer-to-enum-cast warning (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Simplify clk handling in st_rtc_probe() (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Waiman Long) [RHEL-72448]
  - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Waiman Long) [RHEL-72448]
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public() (Guillaume Nault) [RHEL-84572]
  - net: Add non-RCU dev_getbyhwaddr() helper (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in inet_select_addr() (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in rt_is_expired() (Guillaume Nault) [RHEL-84572]
  - ipv4: add RCU protection to ip4_dst_hoplimit() (Guillaume Nault) [RHEL-84572]
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Guillaume Nault) [RHEL-84572]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-587.el9]
changelog:
  - af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer. (Davide Caratti) [RHEL-84598]
  - net/af_packet: check len when min_header_len equals to 0 (Davide Caratti) [RHEL-84598]
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57901}
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57902}
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Davide Caratti) [RHEL-84598]
  - perf trace: Add missing perf_tool__init() (Anubhav Shelat) [RHEL-83634]
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Remove unused iscsi_create_session() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: bnx2i: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Chris Leech) [RHEL-90552]
  - Revert "mm: kmemleak: alloc gray object for reserved region with direct map" (Luiz Capitulino) [RHEL-75156]
  - cifs: Fix integer overflow while processing closetimeo mount option (CKI Backport Bot) [RHEL-87899] {CVE-2025-21962}
  - cifs: Fix integer overflow while processing acregmax mount option (CKI Backport Bot) [RHEL-87920] {CVE-2025-21964}
  - net: fix geneve_opt length integer overflow (CKI Backport Bot) [RHEL-87973] {CVE-2025-22055}
  - RDMA/core: Silence oversized kvmalloc() warning (Kamal Heib) [RHEL-75591]
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Kamal Heib) [RHEL-75591]
  - RDMA/ucaps: Avoid format-security warning (Kamal Heib) [RHEL-75591]
  - IB/mad: Check available slots before posting receive WRs (Kamal Heib) [RHEL-75591]
  - RDMA/core: Pass port to counter bind/unbind operations (Kamal Heib) [RHEL-75591]
  - RDMA/core: Add support to optional-counters binding configuration (Kamal Heib) [RHEL-75591]
  - RDMA/core: Create and destroy rdma_counter using rdma_zalloc_drv_obj() (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix use-after-free when rename device name (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() (Kamal Heib) [RHEL-75591]
  - docs: infiniband: document the UCAP API (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Add support for UCAPs in context creation (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Introduce UCAP (User CAPabilities) API (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fixes infiniband sysctl bounds (Kamal Heib) [RHEL-75591]
  - RDMA/core: Don't expose hw_counters outside of init net namespace (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix best page size finding when it can cross SG entries (Kamal Heib) [RHEL-75591]
  - IB/iser: fix typos in iscsi_iser.c comments (Kamal Heib) [RHEL-75591]
  - RDMA/core: Use ib_port_state_to_str() for IB state sysfs (Kamal Heib) [RHEL-75591]
  - IB/cache: Add log messages for IB device state changes (Kamal Heib) [RHEL-75591]
  - ext4: avoid writing unitialized memory to disk in EA inodes (Brian Foster) [RHEL-86510]
  - ext4: don't track ranges in fast_commit if inode has inlined data (Brian Foster) [RHEL-86510]
  - ext4: fix possible tid_t sequence overflows (Brian Foster) [RHEL-86510]
  - ext4: use ext4_update_inode_fsync_trans() helper in inode creation (Brian Foster) [RHEL-86510]
  - ext4: use memtostr_pad() for s_volume_name (Brian Foster) [RHEL-86510]
  - ext4: warn if delalloc counters are not zero on inactive (Brian Foster) [RHEL-86510]
  - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-86510]
  - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-86510]
  - ext4: correct the hole length returned by ext4_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-86510]
  - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: propagate errors from ext4_sb_bread() in ext4_xattr_block_cache_find() (Brian Foster) [RHEL-86510]
  - jbd2: remove redundant assignement to variable err (Brian Foster) [RHEL-86510]
  - ext4: remove the redundant folio_wait_stable() (Brian Foster) [RHEL-86510]
  - ext4: fix potential unnitialized variable (Brian Foster) [RHEL-86510]
  - ext4: remove block_device_ejected() (Brian Foster) [RHEL-86510]
  - ext4: keep "prefetch_grp" and "nr" consistent (Brian Foster) [RHEL-86510]
  - ext4: replace deprecated strncpy with alternatives (Brian Foster) [RHEL-86510]
  - ext4: clean up s_mb_rb_lock to fix build warnings with C=1 (Brian Foster) [RHEL-86510]
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_show() (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_store() (Brian Foster) [RHEL-86510]
  - ext4: avoid overflow when setting values via sysfs (Brian Foster) [RHEL-86510]
  - ext4: avoid excessive credit estimate in ext4_tmpfile() (Brian Foster) [RHEL-86510]
  - ext4: remove unneeded if checks before kfree (Brian Foster) [RHEL-86510]
  - ext4: set FMODE_CAN_ODIRECT instead of a dummy direct_IO method (Brian Foster) [RHEL-86510]
  - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-83380] {CVE-2024-50301}
  - tracing/histograms: Fix memory leak problem (CKI Backport Bot) [RHEL-81008] {CVE-2022-49648}
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains (Marcin Juszkiewicz) [RHEL-92493]
  - redhat: add test_klp_kprobe to mod-internal.list (Denis Aleksandrov) [RHEL-90828]
  - vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-89689]
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (David Arcari) [RHEL-87253] {CVE-2022-3424}
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs (Herton R. Krzesinski) [RHEL-74389]
  - x86: bring back rep movsq for user access on CPUs without ERMS (Herton R. Krzesinski) [RHEL-74389]
  - io_uring: prevent opcode speculation (CKI Backport Bot) [RHEL-83230] {CVE-2025-21863}


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-3
changelog:
  - Fix Keylime configuration upgrades issues introduced in last rebase
    Resolves: RHEL-475
  - Handle session close using a session manager
    Resolves: RHEL-1252
  - Add ignores for EV_PLATFORM_CONFIG_FLAGS
    Resolves: RHEL-947


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-4
changelog:
  - Update spec file to use %verify(not md5 size mode mtime) for files updated in %post scriptlets
    Resolves: RHEL-475


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-15
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook
     server certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'
    Resolves: RHEL-78057
    Resolves: RHEL-78313
    Resolves: RHEL-78316


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-4
changelog:
  - Backport upstream PR#1240 - logging: remove option to log into separate file
    Resolves: rhbz#2154584 - keylime verifier is not logging to /var/log/keylime


author: Patrik Koncity <pkoncity@redhat.com> - 7.3.0-2
changelog:
  - Keylime SELinux policy provides more restricted ports.
  - New SELinux label for ports used by keylime.
  - Adding tabrmd interfaces allow unix stream socket communication and dbus communication.
  - Allow the keylime_server_t domain to get the attributes of all filesystems.
    Resolves: RHEL-595
    Resolves: RHEL-390
    Resolves: RHEL-948


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 8.2-1
changelog:
  - Rebuild for RHEL AV 8.2.
  - Include ntfs-3g-system-compression plugin.
    resolves: rhbz#1705234, rhbz#1796073


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Adam Borowski <kilobyte@angband.pl> - 1.11-1
changelog:
  - Update to version 1.11.
  - Disable enumerable_thread_specific_access_0_drd
  - Fix internal find in radix_tree


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Stefan Berger <stefanb@linux.ibm.com> - 0.7.5-0.20210218gite271498466
changelog:
  - Addressed UBSAN and cppcheck detected issues
  - Return proper size of ECC Parameters to pass HLK tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
  - qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
  - vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-688, RHEL-7122, RHEL-19379, RHEL-22166, RHEL-24746
      RHEL-28827, RHEL-45200, RHEL-45952, RHEL-53964, RHEL-54550
      RHEL-56611, RHEL-58446


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61576)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61576)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61576)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61576)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61576)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Jakub Jelen <jjelen@redhat.com> - 1.1.33-4
changelog:
  - Do not build python bindings even if the python is available
  - Fix CVE-2019-13117 (#1728547)
  - Fix CVE-2019-13118 (#1728542)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "i686-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.5.4-2
changelog:
  - Add requires for perl-diagnostics (#1893671) and perl-lib (#1893503)
  - Add other requires as nothing is now automatically supplied


author: Brian C. Lane <bcl@redhat.com> 34.9.15-1
changelog:
  - tito: Add the LoraxRHELTagger from rhel8-branch (bcl)
    Related: rhbz#2070910
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2070910


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> 34.9.27-1
changelog:
  - New lorax documentation - 34.9.27 (bcl) (bcl)
    Related: RHEL-83208
  - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl)
    Resolves: RHEL-83208
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl)
    Resolves: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> - 9.0-35
changelog:
  - Makefile: Making it easier to create releases (bcl)
    Related: rhbz#2071074
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2071074


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Brian C. Lane <bcl@redhat.com> - 9.7-1
changelog:
  - Bump release version to 9.7 (bcl)
    Related: RHEL-91930
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91930


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Tom Callaway <spot@fedoraproject.org> - 33.3.1-17
changelog:
  - hack this ancient beastie to work with lua 5.4
  - maintainer, please update this to the current upstream release at your earliest convenience


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Christopher Tubbs <ctubbsii@fedoraproject.org> - 1:3.6.3-6
changelog:
  - Remove unneeded commons-logging from runtime class path (rhbz#1883751)
  - Also remove redundant commons-codec


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.1
changelog:
  - Set version to 105.0.1
  - Remove redundant package
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes CVE-2024-25629 (c-ares)


author: Andrei Radchenko <aradchen@redhat.com>
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.0-1
changelog:
  - Update to v20.5.0
  - Remove dtrace support
  - bcond corepack, so we don't provide it by default
  - Decrease debuginfo verbosity for all arches
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.1-1
changelog:
  - Rebase to new security release
  - Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
  - Address CVE-2023-32006, CVE-2023-32559 (medium)
  - Address CVE-2023-32005, CVE-2023-32003 (low)
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove lua pretransaction script from spec file
    Resolves: RHEL-81122
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Jan Staněk <jstanek@redhat.com> - 2.0.3-6
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-86603


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
changelog:
  - Rebase to open-mv-tools 12.1.0 [bz#2121203]
  - Resolves: bz#2121203
    ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150190]
  - Resolves: bz#2150190
    ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177086]
  - Resolves: bz#2177086
    ([ESXi][RHEL9]open-vm-tools version 12.2.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
changelog:
  - ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
  - Resolves: bz#2208160
    ([ESXi][RHEL9] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215566]
  - Resolves: bz#2215566
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebaer to open-vm-tools 12.2.5
  - Resolves: bz#2214862
    ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
  - Resolves: bz#2236544
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
  - Resolves: RHEL-2446
    ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.5 [RHEL-45547]
  - Resolves: RHEL-45547
    ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63096]
  - Resolves: RHEL-63096
    ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912


author: Benedikt Bongartz <bongartz@redhat.com> - 0.95.0
changelog:
  - add observability user that is part of the systemd-journal group
  - add opentelemetry collector config folder (`/etc/opentelemetry-collector/configs`)
  - add opentelemetry collector default config
  - add microshift manifests


author: Felix Kolwa <fkolwa@redhat.com> - 0.102.1-4
changelog:
  - Fix SELinux policy resource names
  - Use sources for SELinux resources in spec file
  - Bump revision


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Kseniia Nivnia <knivnia@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-79113


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify post-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-81967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Add toolchain go1.23.7
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-81359


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Remove explicit go toolchain dependency
  - Update addresses CVE-2025-29786
    Resolves: RHEL-83841


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-82967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85033


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210809-1
changelog:
  - Update for new release (v20210809) [bz#1970881]
  - Resolves: bz#1970881
    ([RHEL-9] virt-install --location fails with Could not find an installable distribution at URL '/var/lib/libvirt/images/boot.iso')


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-2
changelog:
  - Drop user_namespace create allow rule, incompatible with current el9 kernel
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-3
changelog:
  - Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-4
changelog:
  - Switch to copies instead of links for pasta: previous workaround unreliable
  - Resolves: RHELPLAN-155811


author: Nathan Scott <nathans@redhat.com> - 5.3.5-3
changelog:
  - Resolve failure in the Nvidia metrics agent (BZ 2030123)
  - PMDA indom cache loading performance improvements (BZ 2030122)
  - Consistent user experience for new farm services (BZ 2030138)
  - Resilience improvements for the pmproxy service (BZ 2030141)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-4
changelog:
  - pmdabcc: resolve compilation issues of some bcc PMDA modules on
    aarch64, ppc64le and s390x (BZ 2024982)
  - pmdabpf: support arm and powerpc architectures (BZ 2024980)
  - Further improve pmlogger service startup latency (BZ 1973833)
  - Additional improvements to farm systemd services (BZ 2030138)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-5
changelog:
  - Further improve pmlogger and pmie farm services (BZ 2030138)
  - Resolve a further KVM selinux issue with KVM (BZ 2006430)
  - Rebuild to use latest selinux-policy for el9 (BZ 2041503)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-8
changelog:
  - Fix pcp-zeroconf logger interval override regression (BZ 1991764)
  - Remove warnings from spec setup of PCP systemd units (BZ 2048024)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-3
changelog:
  - Fix remaining issues in the pcp-ss(1) utility (BZ 1981886)
  - Remove benign pmie systemd unit file warning (BZ 2072971)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-5
changelog:
  - Harden pmdapostfix(1) against missing Postfix (BZ 2059463)
  - Fix cgroups failure on non-x86_64 platforms (BZ 2081262)


author: Nathan Scott <nathans@redhat.com> - 6.0.0-1
changelog:
  - Support --top* options in the pcp-dstat(1) utility (BZ 2020988)
  - Performance improvements, fixes in pmseries --load (BZ 2027430)
  - Switch from static pcp useradd to systemd-sysusers (BZ 2095445)
  - Rebase to latest stable version of PCP (BZ 2117074)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Fix pcp2openmetrics on s390x reading from an archive (RHEL-32407)
  - Fix pcp2openmetrics -F output file option (RHEL-32674)
  - Fix pmlogdump version reporting (RHEL-32381)
  - Add timestamps for pcp2openmetrics archive option (RHEL-32369)
  - Add new metrics to monitor VMware balloon usage (RHEL-32198)


author: Lauren Chilton <lchilton@redhat.com> - 6.2.2-4
changelog:
  - Removed excess headers for pcp2openmetrics tool (RHEL-39159)
  - Fix pcp2openmetrics '-s' option (RHEL-39132)
  - Fix pcp2openmetrics timestamps in archive mode (RHEL-32983)
  - Fix pcp2openmetrics output to adhere to prometheus parser (RHEL-39293)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-5
changelog:
  - Add rpm dependency on package providing ps(1) tool (RHEL-39491)
  - Update Java bytecode in pcp-testasuite package (RHEL-40718)


author: Nathan Scott <nathans@redhat.com> - 6.3.1-1
changelog:
  - New pcp-xsos utility for rapid system summaries (RHEL-30590)
  - Fix Upgrade scripts to not rewrite pmcd.conf (RHEL-40631)
  - Add new Hyper-V balloon usage metrics (RHEL-45715)
  - Auto-load pmdaproc in local context (RHEL-50941)
  - Fix a benign potential libpcp buffer overflow (RHEL-58914)
  - Fix pcp-zeroconf pmie.config write permission (RHEL-59366)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Added conditional lockdown policy access by pmdakvm (BZ 1940971)
  - Added spec file dependency on cyrus-sasl-scram (BZ 1942879)
  - Update to latest PCP sources (BZ 1957575)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-2
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)
  - Correct pcp-testsuite file permissions (BZ 1922040)
  - Resolve pcp-testsuite linkage problems (BZ 1950263)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-3
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)
  - Related: rhbz#1957575


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-4
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Peter Jones <pjones@redhat.com> - 113-10
changelog:
  - I really cannot figure out why bkernel01 thinks the certificate nickname
    starts with /CN=, but it does, so I'm gonna stop fighting with the sand.


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Remi Collet <rcollet@redhat.com> - 8.0.20-1
changelog:
  - rebase to 8.0.20 #2095752
  - clean unneeded dependency on useradd command #2095447
  - add upstream patch to initialize pcre before mbstring
  - retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi


author: Remi Collet <rcollet@redhat.com> - 8.0.30-2
changelog:
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <rcollet@redhat.com> - 8.0.30-3
changelog:
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-1
changelog:
  - stick with the v5.2-rhel branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Resolves: RHEL-60965


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80615


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x"
  - Resolves: RHEL-83262


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Masahiro Matsuya <mmatsuya@redhat.com> - 15.5-1
changelog:
  - update to 15.5
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Brian C. Lane <bcl@redhat.com> - 3.32.1-1
changelog:
  - Use .z version for new builds, start with 3.32.0 (bcl)
    Related: rhbz#1968762
  - tests: Use pykickstart/commands relative to the import (bcl)
    Related: rhbz#1968762


author: Brian C. Lane <bcl@redhat.com> - 3.32.2-1
changelog:
  - Add RHEL 9 handler (mkolman)
    Resolves: rhbz#1966730
  - Add RHEL 9 version for commands that had a RHEL version in the past (mkolman)
    Related: rhbz#1966730
  - Add RHEL 9 version for BTRFS related commands (mkolman)
    Related: rhbz#1966730


author: Brian C. Lane <bcl@redhat.com> - 3.32.4-1
changelog:
  - github: Add rhel9-branch to the list of branches (bcl)
    Related: rhbz#2054906
  - Fix validation of packages arguments (bcl)
    Resolves: rhbz#2054906


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: Brian C. Lane <bcl@redhat.com> - 3.32.6-1
changelog:
  - tests: Update ksvalidator tests to allow new wording for help output (bcl)
    Related: rhbz#2083269
  - rootpw: Use RHEL9 instead of F37 for new rootpw feature (bcl)
    Related: rhbz#2083269
  - rootpw: Add an --allow-ssh argument (bcl)
    Resolves: rhbz#2083269
  - github: Fix workflow to only send coverage for python 3.9 (bcl)
    Related: rhbz#2083269


author: Brian C. Lane <bcl@redhat.com> - 3.32.10-1
changelog:
  - Add DNS handling options to the network command (vslavik)
    Resolves: rhbz#2172531
  - whitelist_externals has changed to allowlist_externals (bcl)
    Related: rhbz#2172531


author: Brian C. Lane <bcl@redhat.com> - 3.32.11-1
changelog:
  - tox: Only run unit tests for python 3.6 (bcl)
    Related: RHEL-17662
  - Add conflict test between ostree sources (#2125655) (jkonecny)
    Related: RHEL-17662
  - Fix missing seen check for output generation (#2125655) (jkonecny)
    Related: RHEL-17662
  - Add new ostreecontainer command (#2125655) (jkonecny)
    Resolves: RHEL-17662
  - Check the conflicting commands automatically (vponcova)
    Related: RHEL-17662
  - Fix tests for conflicting commands (vponcova)
    Related: RHEL-17662
  - Add conflicting commands support (bcl)
    Related: RHEL-17662


author: Brian C. Lane <bcl@redhat.com> - 3.32.12-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61432


author: Brian C. Lane <bcl@redhat.com> - 3.32.14-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61432
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76501


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-44
changelog:
  - Set $RPM_BUILD_ROOT in %{python3_...} macros
    to allow selecting alternate sysconfig install scheme based on that variable


author: Karolina Surma <ksurma@redhat.com> - 3.9-45
changelog:
  - Introduce -f (read from file) option to %py{3}_check_import
  - Introduce -t (filter top-level modules) option to %py{3}_check_import
  - Introduce -e (exclude module globs) option to %py{3}_check_import


author: Karolina Surma <ksurma@redhat.com> - 3.9-46
changelog:
  - Fix multiline arguments processing for %py_check_import
  - Fix %py_shebang_flags handling within %py_check_import
  - Process .pth files in buildroot's sitedirs in %py_check_import
  - Move import_all_modules.py from python-srpm-macros to python-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-47
changelog:
  - Set %__python3 value according to %python3_pkgversion
    I.e. when %python3_pkgversion is 3.12, %__python3 is /usr/bin/python3.12


author: Tomas Orsava <torsava@redhat.com> - 3.9-49
changelog:
  - Add lua helper functions to make it possible to automatically generate
    Obsoletes tags
  - Modify the %py_provides macro to also generate Obsoletes tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9-51
changelog:
  - Add Obsoletes tags with the python39- prefix for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-18
changelog:
  - Subpackage python2-augeas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pino Toscano <ptoscano@redhat.com> - 0.5.0-20
changelog:
  - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix
    the discovery of location in the test
  - Execute the tests at build time
  - Add a simple gating test to execute the test script, and make it gating for
    the python-augeas source


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 5.0.6-19
changelog:
  - Subpackage python2-configobj has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.3-1
changelog:
  - Document differences between dasbus and pydbus (vponcova)
  - Improve the support for interface proxies in the service identifier (vponcova)
  - Improve the support for interface proxies in the message bus (vponcova)
  - Test the interface proxies (vponcova)
  - Make the message bus of a service identifier accessible (vponcova)
  - Fix the testing environment for Fedora Rawhide (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.4-1
changelog:
  - Handle all errors of the DBus call (vponcova)
  - Fix tests for handling DBus errors on the server side (vponcova)
  - Run packit smoke tests for all Fedora (jkonecny)
  - Fix packit archive creation (jkonecny)
  - Add possibility to change setup.py arguments (jkonecny)


author: Bryan Gurney <bgurney@redhat.com> - 0.8-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus and python3-into-dbus-python
  - Resolves: rhbz#1986608


author: Bryan Gurney <bgurney@redhat.com> - 0.04-4
changelog:
  - Remove check test
  - Remove Requires and BuildRequires for python3-pyparsing
  - Resolves: rhbz#1986574


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Marek Blaha <mblaha@redhat.com> - 4.3.0-21
changelog:
  - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320)
  - Fix bogus changelog entry date


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Bryan Gurney <bgurney@redhat.com> - 0.08-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus
  - Resolves: rhbz#1986609


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Miro Hrončok <mhroncok@redhat.com> - 1.10-18
changelog:
  - Subpackage python2-jsonpointer has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.15-5
changelog:
  - Remove check test
  - Remove BuildRequires and Requires for python3-justbases
  - Resolves: rhbz#1986913


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.1.4-1
changelog:
  - Update to version 1.1.4
  - Avoids test warnings on Python 3.10
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474


author: Martin Kolman <mkolman@redhat.com> - 0.48-1
changelog:
  - Merge pull request #23 from poncovka/master-decode_bytes (mkolman)
  - Handle bytes and strings from RPM (#1764642) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 0.49-1
changelog:
  - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman)
  - Fix make archive command after pot file removal (jkonecny)
  - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny)
  - Add Readme with description and translation badge (jkonecny)
  - Add pot file to the git ignore (jkonecny)
  - Pause release when making bumpver to check and solve translations (jkonecny)
  - Remove unused PREFIX from Makefile (jkonecny)
  - Remove Zanata (jkonecny)
  - Push translations to our translation repository (jkonecny)
  - Download translations from Weblate (jkonecny)
  - Remove pot file (jkonecny)
  - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.50-1
changelog:
  - Merge pull request #33 from mzidek-gh/master (mkolman)
  - dump: Use exception's type and value when calculating hash (mzidek)


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux
  - Skip pytest in Red Hat Enterprise Linux
  - Do not build -doc subpackage for Red Hat Enterprise Linux


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: TomasHalman <thalman@redhat.com> - 3.1.1-3
changelog:
  - Remove RSA support
  - Remove build dependency on blinker
    Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:4.8.0.post1-1
changelog:
  - update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
  - Related: Jira:RHEL-2112


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.2-21
changelog:
  - Subpackage python2-prettytable has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Dominik Mierzejewski <rpm@greysector.net> - 0.26-1
changelog:
  - update to 0.26 (#1780153)
  - make main package archful to run tests on all arches
    (pythonN-pyelftools subpackages are still noarch)
  - run readelf tests on x86_64 only for now
  - rename binaries to conform to Python packaging guidelines
  - enable python3 subpackage for EPEL7
  - declare bundled old construct module instead of needlessly requiring it


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Miro Hrončok <mhroncok@redhat.com> - 3.4-6
changelog:
  - Subpackage python2-pyserial has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Tony Asleson <tasleson@redhat.com> - 0.14.6-6
changelog:
  - Fix build failure
    Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 12-1
changelog:
  - Disable the dist generators for Python 2
  - https://fedoraproject.org/wiki/Changes/Disable_Python_2_Dist_RPM_Generators_and_Freeze_Python_2_Macros


author: Tomas Orsava <torsava@redhat.com> - 12-2
changelog:
  - scripts/pythondistdeps: Switch from using pkg_resources to importlib.metadata
    for reading the egg/dist-info metadata
  - The script no longer requires setuptools but instead requires packaging


author: Tomas Orsava <torsava@redhat.com> - 12-4
changelog:
  - scripts/pythondistdeps: Treat extras names case-insensitively and always
    output them in lower case (#1936875)


author: Miro Hrončok <mhroncok@redhat.com> - 12-5.1
changelog:
  - Do not generate setuptools requirement for console_scripts on Python 3.10+
  - See https://fedoraproject.org/wiki/Changes/Reduce_dependencies_on_python3-setuptools


author: Miro Hrončok <mhroncok@redhat.com> - 12-6
changelog:
  - Get rid of distutils deprecation warning (by not using it)
  - The distutils module is deprecated in Python 3.10+
  - https://www.python.org/dev/peps/pep-0632/


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1954531 - Update to Samba 4.14.4
  - resolves: rhbz#1949446 - Fix CVE-2021-20254
  - resolves: rhbz#1942378 - Disable nis support


author: Andreas Schneider <asn@redhat.com> - 4.14.4-7
changelog:
  - related: rhbz#1954531 - Fix build issues with gcc
  - resolves: rhbz#1959712 - Add iouring vfs module


author: Andrea Claudi <aclaudi@redhat.com> - [2.4.4-4.el9]
changelog:
  - Don't build scapy-doc package on rhel (Andrea Claudi) [1973720]
  - Enable gating test on RHEL9 (Jianwen Ji) [1974642]


author: Andrea Claudi <aclaudi@redhat.com> - 2.5.0-1.el9
changelog:
  - Don't package scapy tests (Andrea Claudi)
  - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667]
  - New version 2.5.0 (Andrea Claudi) [RHEL-657]


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.8-1
changelog:
  - New version - 1.8 (Jiri Konecny)
  - Add missing make command to spec file (Jiri Konecny)
  - Don't translate the prompt keys (Vendula Poncova)
  - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny)
  - Use Fedora container registry instead of Dockerhub (Jiri Konecny)
  - Migrate COPR daily COPR builds to Packit (Jiri Konecny)
  - Test build on Fedora ELN (Jiri Konecny)
  - Remove packit get-current-action (Jiri Konecny)
  - Run tests in GitHub workflow (Martin Pitt)
  - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt)
  - Fix pylint to check test code correctly (Jiri Konecny)
  - Use script to run unit tests (Jiri Konecny)
  - Use relative imports in tests (Jiri Konecny)
  - Change directory structure of unit tests (Jiri Konecny)
  - Fix documentation of _process_screen method (Jiri Konecny)
  - Fix pylint issues (Jiri Konecny)
  - Use pylint instead of pocketlint (Jiri Konecny)
  - Add coverage support (Jiri Konecny)
  - Make link to exmples directory in Readme (Jiri Konecny)
  - Fix homepage of the project in setup.py (Jiri Konecny)
  - Fix classifiers in setup.py (Jiri Konecny)
  - Add pypi-upload to Makefile (Jiri Konecny)
  - Use correct variant of the field (Jiri Konecny)
  - Propose Fedora update only to Fedora in development (Jiri Konecny)
  - Add upstream tag template to packit for releasing (Jiri Konecny)
  - Packit will download archive from Source0 if needed (Jiri Konecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.8.3-1
changelog:
  - Fix bumpver Makefile target (Jiri Konecny)
  - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny)
    Related: rhbz#2134889
  - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny)
    Related: rhbz#2134889
  - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny)
    Resolves: rhbz#2134889
  - Add Makefile target for local container tests (Jiri Konecny)
  - Use localization from rhel-9 weblate translation component (Jiri Konecny)
  - Remove changelog from the upstream spec file (Jiri Konecny)
  - Fix spec file archive link (Jiri Konecny)
  - Include also documentation to the tarball (Jiri Konecny)
  - Rename doc directory to docs (Jiri Konecny)
  - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny)
  - Update packit config to reflect new tag naming (Jiri Konecny)
  - Change tag name to just version (Jiri Konecny)
  - Fix GitHub workflow checkout (Jiri Konecny)
  - Switch to packit new fedora-latest alias (Jiri Konecny)
  - Disable duplicate-code in pylint test (Jiri Konecny)
  - Remove duplicate of code between event loops (Jiri Konecny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.1-5
changelog:
  - Initial package for RHEL 9
  - Resolves: rhbz#2175213
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


