# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-116.el10]
changelog:
  - irqchip/gic-v3-its: Fix over allocation in itt_alloc_pool() (Gavin Shan) [RHEL-105602]
  - irqchip/gic-v3-its: Rely on genpool alignment (Gavin Shan) [RHEL-105602]
  - irqchip/gic-v3-its: Share ITS tables with a non-trusted hypervisor (Gavin Shan) [RHEL-105602]
  - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Olga Kornievskaia) [RHEL-102164]
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-102164]
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: fix loop in gss seqno cache (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Cleanup/fix initial rq_pages allocation (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Avoid corruption of a referring call list (Olga Kornievskaia) [RHEL-102164]
  - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Remove dead code from xs_tcp_tls_setup_socket() (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls (Olga Kornievskaia) [RHEL-102164]
  - nfs: ignore SB_RDONLY when remounting nfs (Olga Kornievskaia) [RHEL-102164]
  - nfs: clear SB_RDONLY before getting superblock (Olga Kornievskaia) [RHEL-102164]
  - NFS: always probe for LOCALIO support asynchronously (Olga Kornievskaia) [RHEL-102164]
  - pnfs/flexfiles: connect to NFSv3 DS using TLS if MDS connection uses TLS (Olga Kornievskaia) [RHEL-102164]
  - NFS: add localio to sysfs (Olga Kornievskaia) [RHEL-102164]
  - nfs: use writeback_iter directly (Olga Kornievskaia) [RHEL-102164]
  - nfs: refactor nfs_do_writepage (Olga Kornievskaia) [RHEL-102164]
  - nfs: don't return AOP_WRITEPAGE_ACTIVATE from nfs_do_writepage (Olga Kornievskaia) [RHEL-102164]
  - nfs: fold nfs_page_async_flush into nfs_do_writepage (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Always set NLINK even if the server doesn't support it (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Allow FREE_STATEID to clean up delegations (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Don't check for OPEN feature support in v4.1 (Olga Kornievskaia) [RHEL-102164]
  - NFSv4.2: fix setattr caching of TIME_[MODIFY|ACCESS]_SET when timestamps are delegated (Olga Kornievskaia) [RHEL-102164]
  - NFS: Add support for fallocate(FALLOC_FL_ZERO_RANGE) (Olga Kornievskaia) [RHEL-102164]
  - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: xattr handlers should check for absent nfs filehandles (Olga Kornievskaia) [RHEL-102164]
  - nfs: add a refcount tracker for struct net as held by the nfs_client (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: don't immediately retransmit on seqno miss (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: implement rfc2203 rpcsec_gss seqnum cache (Olga Kornievskaia) [RHEL-102164]
  - NFS: Avoid flushing data while holding directory locks in nfs_rename() (Olga Kornievskaia) [RHEL-102164]
  - NFS/pnfs: Fix the error path in pnfs_layoutreturn_retry_later_locked() (Olga Kornievskaia) [RHEL-102164]
  - NFSv4/pnfs: Reset the layout state after a layoutreturn (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Bump the maximum payload size for the server (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Add a "default" block size (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Remove NFSSVC_MAXBLKSIZE_V2 macro (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Remove NFSD_BUFSIZE (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Remove the RPCSVC_MAXPAGES macro (Olga Kornievskaia) [RHEL-102164]
  - svcrdma: Adjust the number of entries in svc_rdma_send_ctxt::sc_pages (Olga Kornievskaia) [RHEL-102164]
  - svcrdma: Adjust the number of entries in svc_rdma_recv_ctxt::rc_pages (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Adjust size of socket's receive page array dynamically (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Remove svc_rqst :: rq_vec (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Remove svc_fill_write_vector() (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Use rqstp->rq_bvec in nfsd_iter_write() (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Export xdr_buf_to_bvec() (Olga Kornievskaia) [RHEL-102164]
  - NFSD: De-duplicate the svc_fill_write_vector() call sites (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Use rqstp->rq_bvec in nfsd_iter_read() (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Replace the rq_bvec array with dynamically-allocated memory (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Replace the rq_pages array with dynamically-allocated memory (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Remove backchannel check in svc_init_buffer() (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Add a helper to derive maxpages from sv_max_mesg (Olga Kornievskaia) [RHEL-102164]
  - svcrdma: Reduce the number of rdma_rw contexts per-QP (Olga Kornievskaia) [RHEL-102164]
  - nfs: Use a folio in nfs_get_link() (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove legacy dprintks from GETATTR and STATFS codepaths (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove legacy READDIR dprintks (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove dprintks for v2/3 RENAME events (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove REMOVE/RMDIR dprintks (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove old LINK dprintks (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove old v2/3 SYMLINK dprintks (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove old v2/3 create path dprintks (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add tracepoint for getattr and statfs events (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add tracepoint to nfsd_readdir (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add tracepoint to nfsd_rename (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add tracepoints for unlink events (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add tracepoint to nfsd_link() (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add tracepoint to nfsd_symlink (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add nfsd_vfs_create tracepoints (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add a tracepoint to nfsd_lookup_dentry (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add a tracepoint for nfsd_setattr (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Add a Call equivalent to the NFSD_TRACE_PROC_RES macros (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Use sockaddr instead of a generic array (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Implement FATTR4_CLONE_BLKSIZE attribute (Olga Kornievskaia) [RHEL-102164]
  - nfsd: use SHA-256 library API instead of crypto_shash API (Olga Kornievskaia) [RHEL-102164]
  - svcrdma: Unregister the device if svc_rdma_accept() fails (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: allow SOMAXCONN backlogged TCP connections (Olga Kornievskaia) [RHEL-102164]
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: add info about xprt queue times to svc_xprt_dequeue tracepoint (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add commit start/done tracepoints around nfsd_commit() (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove redundant WARN_ON_ONCE in nfsd4_write (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Add experimental setting to disable the use of splice read (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Add /sys/kernel/debug/nfsd (Olga Kornievskaia) [RHEL-102164]
  - NFSD: fix race between nfsd registration and exports_proc (Olga Kornievskaia) [RHEL-102164]
  - NFSD: unregister filesystem in case genl_register_family() fails (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: fix race in cache cleanup causing stale nextcheck time (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: update nextcheck time when adding new cache entries (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Record each NFSv4 call's session slot index (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Implement CB_SEQUENCE referring call lists (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Implement CB_SEQUENCE referring call lists (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Shorten CB_OFFLOAD response to NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-102164]
  - NFSD: OFFLOAD_CANCEL should mark an async COPY as completed (Olga Kornievskaia) [RHEL-102164]
  - NFS/localio: Fix a race in nfs_local_open_fh() (Olga Kornievskaia) [RHEL-102164]
  - nfs: nfs3acl: drop useless assignment in nfs3_get_acl() (Olga Kornievskaia) [RHEL-102164]
  - nfs: direct: drop useless initializer in nfs_direct_write_completion() (Olga Kornievskaia) [RHEL-102164]
  - nfs: move the nfs4_data_server_cache into struct nfs_net (Olga Kornievskaia) [RHEL-102164]
  - nfs: don't share pNFS DS connections between net namespaces (Olga Kornievskaia) [RHEL-102164]
  - nfs: handle failure of nfs_get_lock_context in unlock path (Olga Kornievskaia) [RHEL-102164]
  - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Olga Kornievskaia) [RHEL-102164]
  - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Olga Kornievskaia) [RHEL-102164]
  - Revert "sunrpc: clean cache_detail immediately when flush is written frequently" (Olga Kornievskaia) [RHEL-102164]
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Olga Kornievskaia) [RHEL-102164]
  - nfs: add missing selections of CONFIG_CRC32 (Olga Kornievskaia) [RHEL-102164]
  - nfs: Add missing release on error in nfs_lock_and_join_requests() (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-102164]
  - NFS: Don't allow waiting for exiting tasks (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Don't allow waiting for exiting tasks (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Treat ENETUNREACH errors as fatal for state recovery (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: clp->cl_cons_state < 0 signifies an invalid nfs_client (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Further cleanups to shutdown loops (Olga Kornievskaia) [RHEL-102164]
  - NFS: Shut down the nfs_client only after all the superblocks (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: rpc_clnt_set_transport() must not change the autobind setting (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: rpcbind should never reset the port to the value '0' (Olga Kornievskaia) [RHEL-102164]
  - pNFS/flexfiles: Report ENETDOWN as a connection error (Olga Kornievskaia) [RHEL-102164]
  - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Olga Kornievskaia) [RHEL-102164]
  - NFS: Treat ENETUNREACH errors as fatal in containers (Olga Kornievskaia) [RHEL-102164]
  - NFS: Add a mount option to make ENETUNREACH errors fatal (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Add a sysfs file for one-step xprt deletion (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Add a sysfs file for adding a new xprt (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Add a sysfs files for rpc_clnt information (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Add a sysfs attr for xprtsec (Olga Kornievskaia) [RHEL-102164]
  - NFS: Add implid to sysfs (Olga Kornievskaia) [RHEL-102164]
  - NFS: Refactor trace_nfs4_offload_cancel (Olga Kornievskaia) [RHEL-102164]
  - NFS: Use NFSv4.2's OFFLOAD_STATUS operation (Olga Kornievskaia) [RHEL-102164]
  - NFS: Implement NFSv4.2's OFFLOAD_STATUS operation (Olga Kornievskaia) [RHEL-102164]
  - NFS: Implement NFSv4.2's OFFLOAD_STATUS XDR (Olga Kornievskaia) [RHEL-102164]
  - NFS: fix open_owner_id_maxsz and related fields. (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Avoid unnecessary scans of filesystems for delayed delegations (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Avoid unnecessary scans of filesystems for expired delegations (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Avoid unnecessary scans of filesystems for returning delegations (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Add a Kconfig setting to enable delegated timestamps (Olga Kornievskaia) [RHEL-102164]
  - redhat/configs: add CONFIG_NFSD_V4_DELEG_TIMESTAMPS (Olga Kornievskaia) [RHEL-102164]
  - sysctl: Fixes nsm_local_state bounds (Olga Kornievskaia) [RHEL-102164]
  - nfsd: use a long for the count in nfsd4_state_shrinker_count() (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove obsolete comment from nfs4_alloc_stid (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove unneeded forward declaration of nfsd4_mark_cb_fault() (Olga Kornievskaia) [RHEL-102164]
  - nfsd: reorganize struct nfs4_delegation for better packing (Olga Kornievskaia) [RHEL-102164]
  - nfsd: handle errors from rpc_call_async() (Olga Kornievskaia) [RHEL-102164]
  - nfsd: move cb_need_restart flag into cb_flags (Olga Kornievskaia) [RHEL-102164]
  - nfsd: replace CB_GETATTR_BUSY with NFSD4_CALLBACK_RUNNING (Olga Kornievskaia) [RHEL-102164]
  - nfsd: eliminate cl_ra_cblist and NFSD4_CLIENT_CB_RECALL_ANY (Olga Kornievskaia) [RHEL-102164]
  - nfsd: prevent callback tasks running concurrently (Olga Kornievskaia) [RHEL-102164]
  - nfsd: disallow file locking and delegations for NFSv4 reexport (Olga Kornievskaia) [RHEL-102164]
  - nfsd: filecache: drop the list_lru lock during lock gc scans (Olga Kornievskaia) [RHEL-102164]
  - nfsd: filecache: don't repeatedly add/remove files on the lru list (Olga Kornievskaia) [RHEL-102164]
  - nfsd: filecache: introduce NFSD_FILE_RECENT (Olga Kornievskaia) [RHEL-102164]
  - nfsd: filecache: use list_lru_walk_node() in nfsd_file_gc() (Olga Kornievskaia) [RHEL-102164]
  - nfsd: filecache: use nfsd_file_dispose_list() in nfsd_file_close_inode_sync() (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Re-organize nfsd_file_gc_worker() (Olga Kornievskaia) [RHEL-102164]
  - nfsd: filecache: remove race handling. (Olga Kornievskaia) [RHEL-102164]
  - fs: nfs: acl: Avoid -Wflex-array-member-not-at-end warning (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Fix callback decoder status codes (Olga Kornievskaia) [RHEL-102164]
  - nfsd: eliminate special handling of NFS4ERR_SEQ_MISORDERED (Olga Kornievskaia) [RHEL-102164]
  - nfsd: handle NFS4ERR_BADSLOT on CB_SEQUENCE better (Olga Kornievskaia) [RHEL-102164]
  - nfsd: when CB_SEQUENCE gets ESERVERFAULT don't increment seq_nr (Olga Kornievskaia) [RHEL-102164]
  - nfsd: only check RPC_SIGNALLED() when restarting rpc_task (Olga Kornievskaia) [RHEL-102164]
  - nfsd: always release slot when requeueing callback (Olga Kornievskaia) [RHEL-102164]
  - nfsd: lift NFSv4.0 handling out of nfsd4_cb_sequence_done() (Olga Kornievskaia) [RHEL-102164]
  - nfsd: prepare nfsd4_cb_sequence_done() for error handling rework (Olga Kornievskaia) [RHEL-102164]
  - nfsd: put dl_stid if fail to queue dl_recall (Olga Kornievskaia) [RHEL-102164]
  - nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() (Olga Kornievskaia) [RHEL-102164]
  - svcrdma: do not unregister device for listeners (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Fix trace_nfsd_slot_seqid_sequence (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Remove unused make_checksum (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Return NFS4ERR_FILE_OPEN only when linking an open file (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Return NFS4ERR_FILE_OPEN only when renaming over an open file (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory (Olga Kornievskaia) [RHEL-102164]
  - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove the redundant mapping of nfserr_mlink (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up (Olga Kornievskaia) [RHEL-102164]
  - nfsd: adjust WARN_ON_ONCE in revoke_delegation (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Remove unused krb5_decrypt (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: clean cache_detail immediately when flush is written frequently (Olga Kornievskaia) [RHEL-102164]
  - nfsd: drop fh_update() from S_IFDIR branch of nfsd_create_locked() (Olga Kornievskaia) [RHEL-102164]
  - nfs/vfs: discard d_exact_alias() (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: suppress warnings for unused procfs functions (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Handle -ETIMEDOUT return from tlshd (Olga Kornievskaia) [RHEL-102164]
  - NFSv4: Fix a deadlock when recovering state on a sillyrenamed file (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Prevent looping due to rpc_signal_task() races (Olga Kornievskaia) [RHEL-102164]
  - NFS: Adjust delegated timestamps for O_DIRECT reads and writes (Olga Kornievskaia) [RHEL-102164]
  - NFS: O_DIRECT writes must check and adjust the file length (Olga Kornievskaia) [RHEL-102164]
  - nfsd: fix __fh_verify for localio (Olga Kornievskaia) [RHEL-102164]
  - nfsd: fix uninitialised slot info when a request is retried (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: simplify rpcauth_cache_shrink_count() (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: do not retry on EKEYEXPIRED when user TGT ticket expired (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: add netns inum and srcaddr to debugfs rpc_xprt info (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Remove gss_{de,en}crypt_xdr_buf deadcode (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Remove gss_generic_token deadcode (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: Remove unused xprt_iter_get_xprt (Olga Kornievskaia) [RHEL-102164]
  - Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC messages" (Olga Kornievskaia) [RHEL-102164]
  - nfsd: implement OPEN_ARGS_SHARE_ACCESS_WANT_OPEN_XOR_DELEGATION (Olga Kornievskaia) [RHEL-102164]
  - nfsd: handle delegated timestamps in SETATTR (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add support for delegated timestamps (Olga Kornievskaia) [RHEL-102164]
  - nfsd: rework NFS4_SHARE_WANT_* flag handling (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add support for FATTR4_OPEN_ARGUMENTS (Olga Kornievskaia) [RHEL-102164]
  - nfsd: prepare delegation code for handing out *_ATTRS_DELEG delegations (Olga Kornievskaia) [RHEL-102164]
  - nfsd: rename NFS4_SHARE_WANT_* constants to OPEN4_SHARE_ACCESS_WANT_* (Olga Kornievskaia) [RHEL-102164]
  - nfsd: switch to autogenerated definitions for open_delegation_type4 (Olga Kornievskaia) [RHEL-102164]
  - nfs_common: make include/linux/nfs4.h include generated nfs4_1.h (Olga Kornievskaia) [RHEL-102164]
  - nfsd: fix handling of delegated change attr in CB_GETATTR (Olga Kornievskaia) [RHEL-102164]
  - NFSv4.2: make LAYOUTSTATS and LAYOUTERROR MOVEABLE (Olga Kornievskaia) [RHEL-102164]
  - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (Olga Kornievskaia) [RHEL-102164]
  - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (Olga Kornievskaia) [RHEL-102164]
  - NFS: Rename struct nfs4_offloadcancel_data (Olga Kornievskaia) [RHEL-102164]
  - NFS: Fix typo in OFFLOAD_CANCEL comment (Olga Kornievskaia) [RHEL-102164]
  - NFS: CB_OFFLOAD can return NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: display total RPC tasks for RPC client (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: only put task on cl_tasks list after the RPC call slot is reserved. (Olga Kornievskaia) [RHEL-102164]
  - SUNRPC: Document validity guarantees of the pointer returned by reserve_space (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Insulate nfsd4_encode_fattr4() from page boundaries in the encode buffer (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Insulate nfsd4_encode_secinfo() from page boundaries in the encode buffer (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Refactor nfsd4_do_encode_secinfo() again (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Insulate nfsd4_encode_readlink() from page boundaries in the encode buffer (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Insulate nfsd4_encode_read_plus_data() from page boundaries in the encode buffer (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Insulate nfsd4_encode_read_plus() from page boundaries in the encode buffer (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Insulate nfsd4_encode_read() from page boundaries in the encode buffer (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Encode COMPOUND operation status on page boundaries (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add shrinker to reduce number of slots allocated per session (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add support for freeing unused session-DRC slots (Olga Kornievskaia) [RHEL-102164]
  - nfsd: allocate new session-based DRC slots on demand. (Olga Kornievskaia) [RHEL-102164]
  - nfsd: add session slot count to /proc/fs/nfsd/clients/*/info (Olga Kornievskaia) [RHEL-102164]
  - nfsd: remove artificial limits on the session-based DRC (Olga Kornievskaia) [RHEL-102164]
  - nfsd: use an xarray to store v4.1 session slots (Olga Kornievskaia) [RHEL-102164]
  - sunrpc: remove all connection limit configuration (Olga Kornievskaia) [RHEL-102164]
  - nfsd: don't use sv_nrthreads in connection limiting calculations. (Olga Kornievskaia) [RHEL-102164]
  - nfsd: fix legacy client tracking initialization (Olga Kornievskaia) [RHEL-102164]
  - NFSD: Clean up unused variable (Olga Kornievskaia) [RHEL-102164]
  - nfsd: trace: remove redundant stateid even deleg_recall (Olga Kornievskaia) [RHEL-102164]
  - exportfs: Remove EXPORT_OP_ASYNC_LOCK (Olga Kornievskaia) [RHEL-102164]
  - NLM/NFSD: Fix lock notifications for async-capable filesystems (Olga Kornievskaia) [RHEL-102164]
  - gfs2/ocfs2: set FOP_ASYNC_LOCK (Olga Kornievskaia) [RHEL-102164]
  - fs: Introduce FOP_ASYNC_LOCK (Olga Kornievskaia) [RHEL-102164]
  - x86/sev: Make sure pages are not skipped during kdump (Bandan Das) [RHEL-67539]
  - x86/sev: Do not touch VMSA pages during SNP guest memory kdump (Bandan Das) [RHEL-67539]
  - drm/nouveau/nvkm: introduce new GSP reply policy NVKM_GSP_RPC_REPLY_POLL (José Expósito) [RHEL-100737]
  - drm/nouveau/nvkm: factor out current GSP RPC command policies (José Expósito) [RHEL-100737]
  - selftests/cgroup: Fix compile error in test_cpu.c (Radostin Stoyanov) [RHEL-80381]
  - mm: swap_cgroup: remove double initialization of locals (Radostin Stoyanov) [RHEL-80381]
  - mm: remove the non-useful else after a break in a if statement (Radostin Stoyanov) [RHEL-80381]
  - mm: remove unnecessary whitespace before a quoted newline (Radostin Stoyanov) [RHEL-80381]
  - mm: prefer 'unsigned int' to bare use of 'unsigned' (Radostin Stoyanov) [RHEL-80381]
  - mm: memcontrol: fix swap counter leak from offline cgroup (Radostin Stoyanov) [RHEL-80381]
  - memcg: factor out mem_cgroup_stat_aggregate() (Radostin Stoyanov) [RHEL-80381]
  - mm/swap_cgroup: decouple swap cgroup recording and clearing (Radostin Stoyanov) [RHEL-80381]
  - mm/swap_cgroup: remove global swap cgroup lock (Radostin Stoyanov) [RHEL-80381]
  - mm/swap_cgroup: remove swap_cgroup_cmpxchg (Radostin Stoyanov) [RHEL-80381]
  - mm: swap_cgroup: get rid of __lookup_swap_cgroup() (Radostin Stoyanov) [RHEL-80381]
  - mm: swap_cgroup: allocate swap_cgroup map using vcalloc() (Radostin Stoyanov) [RHEL-80381]
  - mm, memcontrol: avoid duplicated memcg enable check (Radostin Stoyanov) [RHEL-80381]
  - memcg/hugetlb: remove memcg hugetlb try-commit-cancel protocol (Radostin Stoyanov) [RHEL-80381]
  - memcg/hugetlb: introduce mem_cgroup_charge_hugetlb (Radostin Stoyanov) [RHEL-80381]
  - memcg/hugetlb: introduce memcg_accounts_hugetlb (Radostin Stoyanov) [RHEL-80381]
  - cgroup: fix race between fork and cgroup.kill (Radostin Stoyanov) [RHEL-80381]
  - kernel/cgroup: Remove the unused variable climit (Radostin Stoyanov) [RHEL-80381]
  - fdget_raw() users: switch to CLASS(fd_raw) (Radostin Stoyanov) [RHEL-80381]
  - css_set_fork(): switch to CLASS(fd_raw, ...) (Radostin Stoyanov) [RHEL-80381]
  - cgroup/freezer: Add cgroup CGRP_FROZEN flag update helper (Radostin Stoyanov) [RHEL-80381]
  - cgroup/freezer: Reduce redundant traversal for cgroup_freeze (Radostin Stoyanov) [RHEL-80381]
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Radostin Stoyanov) [RHEL-80381]
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Radostin Stoyanov) [RHEL-80381]
  - cgroup/rstat: Selftests for niced CPU statistics (Radostin Stoyanov) [RHEL-80381]
  - cgroup/rstat: Tracking cgroup-level niced CPU time (Radostin Stoyanov) [RHEL-80381]
  - bnxt_en: Flush FW trace before copying to the coredump (Shruti Parab) [RHEL-76565]
  - bnxt_en: fix module unload sequence (Shruti Parab) [RHEL-76565]
  - bnxt_en: Fix ethtool -d byte order for 32-bit values (Shruti Parab) [RHEL-76565]
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab) [RHEL-76565]
  - bnxt_en: Fix coredump logic to free allocated buffer (Shruti Parab) [RHEL-76565]
  - bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings() (Shruti Parab) [RHEL-76565]
  - bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan() (Shruti Parab) [RHEL-76565]
  - bnxt_en: Fix ethtool selftest output in one of the failure cases (Shruti Parab) [RHEL-76565]
  - bnxt_en: Fix error handling path in bnxt_init_chip() (Shruti Parab) [RHEL-76565]
  - bnxt_en: improve TX timestamping FIFO configuration (Shruti Parab) [RHEL-76565]
  - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code (Shruti Parab) [RHEL-76565]
  - bnxt_en: Remove unused macros in bnxt_ulp.h (Shruti Parab) [RHEL-76565]
  - bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp (Shruti Parab) [RHEL-76565]
  - bnxt_en: Report the ethtool coredump length after copying the coredump (Shruti Parab) [RHEL-76565]
  - bnxt_en: Change FW message timeout warning (Shruti Parab) [RHEL-76565]
  - bnxt_en: Linearize TX SKB if the fragments exceed the max (Shruti Parab) [RHEL-76565]
  - bnxt_en: Mask the bd_cnt field in the TX BD properly (Shruti Parab) [RHEL-76565]
  - bnxt_en: add .set_module_eeprom_by_page() support (Shruti Parab) [RHEL-76565]
  - bnxt_en: Refactor bnxt_get_module_eeprom_by_page() (Shruti Parab) [RHEL-76565]
  - bnxt_en: Update firmware interface to 1.10.3.97 (Shruti Parab) [RHEL-76565]
  - bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set (Shruti Parab) [RHEL-76565]
  - bnxt_en: Add devlink support for ENABLE_ROCE nvm parameter (Shruti Parab) [RHEL-76565]
  - bnxt_en: Refactor bnxt_hwrm_nvm_req() (Shruti Parab) [RHEL-76565]
  - bnxt_en: Add support for a new ethtool dump flag 3 (Shruti Parab) [RHEL-76565]
  - bnxt_en: Extend queue stop/start for TX rings (Shruti Parab) [RHEL-76565]
  - bnxt_en: Refactor TX ring free logic (Shruti Parab) [RHEL-76565]
  - bnxt_en: Reallocate RX completion ring for TPH support (Shruti Parab) [RHEL-76565]
  - bnxt_en: Pass NQ ID to the FW when allocating RX/RX AGG rings (Shruti Parab) [RHEL-76565]
  - bnxt_en: Refactor RX/RX AGG ring parameters setup for P5_PLUS (Shruti Parab) [RHEL-76565]
  - bnxt_en: Refactor bnxt_free_tx_rings() to free per TX ring (Shruti Parab) [RHEL-76565]
  - bnxt_en: Refactor completion ring free routine (Shruti Parab) [RHEL-76565]
  - bnxt_en: Refactor TX ring allocation logic (Shruti Parab) [RHEL-76565]
  - bnxt_en: Refactor completion ring allocation logic for P5_PLUS chips (Shruti Parab) [RHEL-76565]
  - bnxt_en: Set NPAR 1.2 support when registering with firmware (Shruti Parab) [RHEL-76565]
  - eth: bnxt: allocate enough buffer space to meet HDS threshold (Shruti Parab) [RHEL-76565]
  - eth: bnxt: apply hds_thrs settings correctly (Shruti Parab) [RHEL-76565]
  - bnxt_en: add support for hds-thresh ethtool command (Shruti Parab) [RHEL-76565]
  - bnxt_en: add support for tcp-data-split ethtool command (Shruti Parab) [RHEL-76565]
  - bnxt_en: add support for rx-copybreak ethtool command (Shruti Parab) [RHEL-76565]
  - bnxt_en: Skip reading PXP registers during ethtool -d if unsupported (Shruti Parab) [RHEL-76565]
  - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (Shruti Parab) [RHEL-76565]
  - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (Shruti Parab) [RHEL-76565]
  - bnxt_en: Do not allow ethtool -m on an untrusted VF (Shruti Parab) [RHEL-76565]
  - bnxt_en: Use FW defined resource limits for RoCE (Shruti Parab) [RHEL-76565]
  - bnxt_en: Fix potential crash when dumping FW log coredump (Shruti Parab) [RHEL-76565]
  - bnxt_en: handle tpa_info in queue API implementation (Shruti Parab) [RHEL-76565]
  - bnxt_en: refactor bnxt_alloc_rx_rings() to call bnxt_alloc_rx_agg_bmap() (Shruti Parab) [RHEL-76565]
  - bnxt_en: refactor tpa_info alloc/free into helpers (Shruti Parab) [RHEL-76565]
  - bnxt_en: Add FW trace coredump segments to the coredump (Shruti Parab) [RHEL-76565]
  - bnxt_en: Add a new ethtool -W dump flag (Shruti Parab) [RHEL-76565]
  - bnxt_en: Add 2 parameters to bnxt_fill_coredump_seg_hdr() (Shruti Parab) [RHEL-76565]
  - bnxt_en: Add functions to copy host context memory (Shruti Parab) [RHEL-76565]
  - bnxt_en: Do not free FW log context memory (Shruti Parab) [RHEL-76565]
  - bnxt_en: Manage the FW trace context memory (Shruti Parab) [RHEL-76565]
  - bnxt_en: Allocate backing store memory for FW trace logs (Shruti Parab) [RHEL-76565]
  - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76565]
  - bnxt_en: Refactor bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76565]
  - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type (Shruti Parab) [RHEL-76565]
  - bnxt_en: Update firmware interface spec to 1.10.3.85 (Shruti Parab) [RHEL-76565]
  - bnxt_en: optimize gettimex64 (Shruti Parab) [RHEL-76565]
  - eth: bnxt: use page pool for head frags (Shruti Parab) [RHEL-76565]
  - bnxt_en: add unlocked version of bnxt_refclk_read (Shruti Parab) [RHEL-76565]
  - bnxt_en: replace PTP spinlock with seqlock (Shruti Parab) [RHEL-76565]
  - bnxt_en: cache only 24 bits of hw counter (Shruti Parab) [RHEL-76565]
  - scsi: core: Fix command pass through retry regression (Ewan D. Milne) [RHEL-89684]
  - redhat/configs: enable CONFIG_VFAT_FS as a module (Dorinda Bassey) [RHEL-87388]
  - Revert "redhat/configs: automotive: disable CONFIG_AIO" (Davide Caratti) [RHEL-82719]


author: Julio Faracco <jfaracco@redhat.com> [6.12.0-117.el10]
changelog:
  - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (CKI Backport Bot) [RHEL-106717] {CVE-2025-38412}
  - bus: mhi: host: Fix race between unprepare and queue_buf (Mattijs Korpershoek) [RHEL-93880]
  - bus: mhi: host: pci_generic: Add support for SA8775P endpoint (Mattijs Korpershoek) [RHEL-93880]
  - bus: mhi: host: Remove unused functions (Mattijs Korpershoek) [RHEL-93880]
  - PCI: epf-mhi: Update device ID for SA8775P (Mattijs Korpershoek) [RHEL-93880]
  - bus: mhi: host: Avoid possible uninitialized fw_load_type (Mattijs Korpershoek) [RHEL-93880]
  - bus: mhi: host: Add a policy to enable image transfer via BHIe in PBL (Mattijs Korpershoek) [RHEL-93880]
  - bus: mhi: host: Refactor BHI/BHIe based firmware loading (Mattijs Korpershoek) [RHEL-93880]
  - bus: mhi: host: pci_generic: fix MHI BAR mapping (Mattijs Korpershoek) [RHEL-93880]
  - bus: mhi: host: pci_generic: Use pcim_iomap_region() to request and map MHI BAR (Mattijs Korpershoek) [RHEL-93880]
  - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95608]
  - devres: Move devm_*_action*() APIs to devres.h (CKI Backport Bot) [RHEL-105008]
  - fwctl: Fix repeated device word in log message (Benjamin Poirier) [RHEL-86015]
  - mlx5: Create an auxiliary device for fwctl_mlx5 (Benjamin Poirier) [RHEL-86015]
  - fwctl/mlx5: Support for communicating with mlx5 fw (Benjamin Poirier) [RHEL-86015]
  - fwctl: Add documentation (Benjamin Poirier) [RHEL-86015]
  - fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware (Benjamin Poirier) [RHEL-86015]
  - taint: Add TAINT_FWCTL (Benjamin Poirier) [RHEL-86015]
  - fwctl: FWCTL_INFO to return basic information about the device (Benjamin Poirier) [RHEL-86015]
  - fwctl: Basic ioctl dispatch for the character device (Benjamin Poirier) [RHEL-86015]
  - fwctl: Add basic structure for a class subsystem with a cdev (Benjamin Poirier) [RHEL-86015]
  - net: bridge: Do not offload IGMP/MLD messages (Mohammad Heib) [RHEL-75595]
  - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-75595]
  - bridge: netfilter: Fix forwarding of fragmented packets (Mohammad Heib) [RHEL-75595]
  - selftests: net/bridge : add tests for per vlan snooping with stp state changes (Mohammad Heib) [RHEL-75595]
  - net: bridge: mcast: update multicast contex when vlan state is changed (Mohammad Heib) [RHEL-75595]
  - net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions (Mohammad Heib) [RHEL-75595]
  - net: bridge: switchdev: do not notify new brentries as changed (Mohammad Heib) [RHEL-75595]
  - net: bridge: locally receive all multicast packets if IFF_ALLMULTI is set (Mohammad Heib) [RHEL-75595]
  - net: bridge: mcast: Notify on mdb offload failure (Mohammad Heib) [RHEL-75595]
  - net: bridge: Add offload_fail_notification bopt (Mohammad Heib) [RHEL-75595]
  - net: bridge: mcast: Add offload failed mdb flag (Mohammad Heib) [RHEL-75595]
  - selftests: test_bridge_neigh_suppress: Test unicast ARP/NS with suppression (Mohammad Heib) [RHEL-75595]
  - net: bridge: Prevent unicast ARP/NS packets from being suppressed by bridge (Mohammad Heib) [RHEL-75595]
  - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. (Mohammad Heib) [RHEL-75595]
  - net: switchdev: Convert blocking notification chain to a raw one (Mohammad Heib) [RHEL-75595]
  - bridge: mdb: Allow replace of a host-joined group (Mohammad Heib) [RHEL-75595]
  - bridge: Make br_is_nd_neigh_msg() accept pointer to "const struct sk_buff" (Mohammad Heib) [RHEL-75595]
  - selftests: net: Add a VLAN bridge binding selftest (Mohammad Heib) [RHEL-75595]
  - net: bridge: Handle changes in VLAN_FLAG_BRIDGE_BINDING (Mohammad Heib) [RHEL-75595]
  - net: bridge: Extract a helper to handle bridge_binding toggles (Mohammad Heib) [RHEL-75595]
  - net: bridge: constify 'struct bin_attribute' (Mohammad Heib) [RHEL-75595]
  - bridge: Allow deleting FDB entries with non-existent VLAN (Mohammad Heib) [RHEL-75595]
  - net: bridge: replace call_rcu by kfree_rcu for simple kmem_cache_free callback (Mohammad Heib) [RHEL-75595]
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103170] {CVE-2025-38159}
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Xin Long) [RHEL-96627]
  - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-96627]
  - tipc: use kfree_sensitive() for aead cleanup (Xin Long) [RHEL-96627]
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (Xin Long) [RHEL-96627]
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Xin Long) [RHEL-96627]
  - tipc: Removing deprecated strncpy() (Xin Long) [RHEL-96627]
  - tipc: fix memory leak in tipc_link_xmit (Xin Long) [RHEL-96627]
  - wifi: mt76: mt7925: add rfkill_poll for hardware rfkill (Jose Ignacio Tornos Martinez) [RHEL-100945]
  - wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103230] {CVE-2025-38292}
  - netlink: specs: dpll: replace underscores with dashes in names (CKI Backport Bot) [RHEL-101739]
  - dpll: fix xa_alloc_cyclic() error handling (CKI Backport Bot) [RHEL-101739]
  - dpll: Add an assertion to check freq_supported_num (CKI Backport Bot) [RHEL-101739]
  - tools: ynl-gen: de-kdocify enums with no doc for entries (CKI Backport Bot) [RHEL-101739]
  - redhat/configs: automotive: enable MHI_BUS_EP (Mattijs Korpershoek) [RHEL-85098]
  - arp: use RCU protection in arp_xmit() (Guillaume Nault) [RHEL-96598]
  - ipv4: use RCU protection in __ip_rt_update_pmtu() (Guillaume Nault) [RHEL-96598]
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Guillaume Nault) [RHEL-96614]
  - geneve: Fix use-after-free in geneve_find_dev(). (Guillaume Nault) [RHEL-96614]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-118.el10]
changelog:
  - tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106093] {CVE-2025-38471}
  - devlink: Add new "clock_id" generic device param (Ivan Vecera) [RHEL-104975]
  - devlink: Add support for u64 parameters (Ivan Vecera) [RHEL-104975]
  - netlink: specs: devlink: replace underscores with dashes in names (Ivan Vecera) [RHEL-104975]
  - devlink: Add new "enable_phc" generic device param (Ivan Vecera) [RHEL-104975]
  - netlink: fix policy dump for int with validation callback (Ivan Vecera) [RHEL-104975]
  - devlink: use DEVLINK_VAR_ATTR_TYPE_* instead of NLA_* in fmsg (Ivan Vecera) [RHEL-104975]
  - devlink: avoid param type value translations (Ivan Vecera) [RHEL-104975]
  - devlink: define enum for attr types of dynamic attributes (Ivan Vecera) [RHEL-104975]
  - tools: ynl-gen: allow noncontiguous enums (Ivan Vecera) [RHEL-104975]
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103272] {CVE-2025-38250}
  - drm/amdkfd: add hqd_sdma_get_doorbell callbacks for gfx7/8 (José Expósito) [RHEL-75958]
  - Revert "drm/amd/display: pause the workload setting in dm" (José Expósito) [RHEL-75958]
  - redhat: Update DRM version (José Expósito) [RHEL-75958]
  - drm/amd/display: Fix AMDGPU_MAX_BL_LEVEL value (José Expósito) [RHEL-75958]
  - drm/amd/display: Export full brightness range to userspace (José Expósito) [RHEL-75958]
  - drm/amd/display: Optimize custom brightness curve (José Expósito) [RHEL-75958]
  - drm/amd/display: Only read ACPI backlight caps once (José Expósito) [RHEL-75958]
  - drm/amd/display: Fix default DC and AC levels (José Expósito) [RHEL-75958]
  - drm/amd/display: Add debugging message for brightness caps (José Expósito) [RHEL-75958]
  - drm/amd/display: Get LTTPR IEEE OUI/Device ID From Closest LTTPR To Host (José Expósito) [RHEL-75958]
  - drm/amd/display: Add early 8b/10b channel equalization test pattern sequence (José Expósito) [RHEL-75958]
  - drm/amdgpu/mes: add missing locking in helper functions (José Expósito) [RHEL-75958]
  - drm/amd/display: Fix mpv playback corruption on weston (José Expósito) [RHEL-75958]
  - drm/amd/display: Add dc cap for dp tunneling (José Expósito) [RHEL-75958]
  - drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (José Expósito) [RHEL-75958]
  - drm/amdgpu: add kicker fws loading for gfx11/smu13/psp13 (José Expósito) [RHEL-75958]
  - drm/amdgpu: switch job hw_fence to amdgpu_fence (José Expósito) [RHEL-75958]
  - drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences (José Expósito) [RHEL-75958]
  - drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL (José Expósito) [RHEL-75958]
  - drm/xe: Fix early wedge on GuC load failure (José Expósito) [RHEL-75958]
  - drm/xe: Fix taking invalid lock on wedge (José Expósito) [RHEL-75958]
  - drm/xe: Fix memset on iomem (José Expósito) [RHEL-75958]
  - drm/amd/display: Check dce_hwseq before dereferencing it (José Expósito) [RHEL-75958]
  - drm/amdgpu: Add kicker device detection (José Expósito) [RHEL-75958]
  - drm/amdgpu: VCN v5_0_1 to prevent FW checking RB during DPG pause (José Expósito) [RHEL-75958]
  - drm/amd/display: Fix RMCM programming seq errors (José Expósito) [RHEL-75958]
  - drm/xe/guc_submit: add back fix (José Expósito) [RHEL-75958]
  - drm/xe/sched: stop re-submitting signalled jobs (José Expósito) [RHEL-75958]
  - drm/xe/vm: move rebind_work init earlier (José Expósito) [RHEL-75958]
  - drm/amd/display: Correct non-OLED pre_T11_delay. (José Expósito) [RHEL-75958]
  - drm/amdgpu: disable workload profile switching when OD is enabled (José Expósito) [RHEL-75958]
  - drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram (José Expósito) [RHEL-75958]
  - drm/amd/display: Add null pointer check for get_first_active_display() (José Expósito) [RHEL-75958]
  - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready (José Expósito) [RHEL-75958]
  - drm/bridge: cdns-dsi: Check return value when getting default PHY config (José Expósito) [RHEL-75958]
  - drm/bridge: cdns-dsi: Fix connecting to next bridge (José Expósito) [RHEL-75958]
  - drm/bridge: cdns-dsi: Fix phy de-init and flag it so (José Expósito) [RHEL-75958]
  - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (José Expósito) [RHEL-75958]
  - drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read (José Expósito) [RHEL-75958]
  - drm/i915/ptl: Use everywhere the correct DDI port clock select mask (José Expósito) [RHEL-75958]
  - drm/amdkfd: Fix race in GWS queue scheduling (José Expósito) [RHEL-75958]
  - drm/udl: Unregister device before cleaning up on disconnect (José Expósito) [RHEL-75958]
  - drm/tegra: Fix a possible null pointer dereference (José Expósito) [RHEL-75958]
  - drm/tegra: Assign plane type before registration (José Expósito) [RHEL-75958]
  - drm/simpledrm: Do not upcast in release helpers (José Expósito) [RHEL-75958]
  - drm/panel: simple: Tianma TM070JDHG34-00: add delays (José Expósito) [RHEL-75958]
  - drm/cirrus-qemu: Fix pitch programming (José Expósito) [RHEL-75958]
  - drm/ast: Fix comment on modeset lock (José Expósito) [RHEL-75958]
  - drm/xe: Process deferred GGTT node removals on device unwind (José Expósito) [RHEL-75958]
  - drm/xe/guc: Explicitly exit CT safe mode on unwind (José Expósito) [RHEL-75958]
  - drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type (José Expósito) [RHEL-75958]
  - drm/bridge: ti-sn65dsi86: make use of debugfs_init callback (José Expósito) [RHEL-75958]
  - drm/i915: fix build error some more (José Expósito) [RHEL-75958]
  - drm/amd: Adjust output for discovery error handling (José Expósito) [RHEL-75958]
  - drm: writeback: Fix drm_writeback_connector_cleanup signature (José Expósito) [RHEL-75958]
  - drm/xe: move DPT l2 flush to a more sensible place (José Expósito) [RHEL-75958]
  - drm/xe: Move DSB l2 flush to a more sensible place (José Expósito) [RHEL-75958]
  - drm/i915/snps_hdmi_pll: Fix 64-bit divisor truncation by using div64_u64 (José Expósito) [RHEL-75958]
  - drm/xe/display: Add check for alloc_ordered_workqueue() (José Expósito) [RHEL-75958]
  - drm/amdgpu/mes: add compatibility checks for set_hw_resource_1 (José Expósito) [RHEL-75958]
  - drm/amd/display: Add sanity checks for drm_edid_raw() (José Expósito) [RHEL-75958]
  - drm/i915/display: Add check for alloc_ordered_workqueue() and alloc_workqueue() (José Expósito) [RHEL-75958]
  - Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1" (José Expósito) [RHEL-75958]
  - drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1 (José Expósito) [RHEL-75958]
  - drm/scheduler: signal scheduled fence when kill job (José Expósito) [RHEL-75958]
  - drm/amdgpu: seq64 memory unmap uses uninterruptible lock (José Expósito) [RHEL-75958]
  - drm/amdgpu/vcn2.5: read back register after written (José Expósito) [RHEL-75958]
  - drm/amdgpu/vcn3: read back register after written (José Expósito) [RHEL-75958]
  - drm/amdgpu/vcn4: read back register after written (José Expósito) [RHEL-75958]
  - drm/amdgpu/vcn5.0.1: read back register after written (José Expósito) [RHEL-75958]
  - amd/amdkfd: fix a kfd_process ref leak (José Expósito) [RHEL-75958]
  - Revert "drm/amd/display: Fix VUpdate offset calculations for dcn401" (José Expósito) [RHEL-75958]
  - drm/xe/bmg: Update Wa_16023588340 (José Expósito) [RHEL-75958]
  - drm/amdkfd: move SDMA queue reset capability check to node_show (José Expósito) [RHEL-75958]
  - drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled (José Expósito) [RHEL-75958]
  - drm/nouveau/bl: increase buffer size to avoid truncate warning (José Expósito) [RHEL-75958]
  - drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (José Expósito) [RHEL-75958]
  - drm/nouveau/gsp: split rpc handling out on its own (José Expósito) [RHEL-75958]
  - drm/ssd130x: fix ssd132x_clear_screen() columns (José Expósito) [RHEL-75958]
  - drm/xe/svm: Fix regression disallowing 64K SVM migration (José Expósito) [RHEL-75958]
  - drm/appletbdrm: Make appletbdrm depend on X86 (José Expósito) [RHEL-75958]
  - udmabuf: use sgtable-based scatterlist wrappers (José Expósito) [RHEL-75958]
  - drm/panel: simple: Add POWERTIP PH128800T004-ZZA01 panel entry (José Expósito) [RHEL-75958]
  - drm/xe/uc: Remove static from loop variable (José Expósito) [RHEL-75958]
  - drm/amdgpu: Add indirect L1_TLB_CNTL reg programming for VFs (José Expósito) [RHEL-75958]
  - drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB (José Expósito) [RHEL-75958]
  - drm/amd/display: Restructure DMI quirks (José Expósito) [RHEL-75958]
  - drm/amd/display: Correct prefetch calculation (José Expósito) [RHEL-75958]
  - drm/amd/pm: Reset SMU v13.0.x custom settings (José Expósito) [RHEL-75958]
  - drm/amd/display: Fix VUpdate offset calculations for dcn401 (José Expósito) [RHEL-75958]
  - drm/amdgpu/gfx9: fix CSIB handling (José Expósito) [RHEL-75958]
  - drm/amd/display: disable EASF narrow filter sharpening (José Expósito) [RHEL-75958]
  - drm/amdgpu/gfx8: fix CSIB handling (José Expósito) [RHEL-75958]
  - drm/amdgpu: Disallow partition query during reset (José Expósito) [RHEL-75958]
  - drm/amdgpu: fix MES GFX mask (José Expósito) [RHEL-75958]
  - drm/amd/display: Fix Vertical Interrupt definitions for dcn32, dcn401 (José Expósito) [RHEL-75958]
  - drm/amd/display: Correct SSC enable detection for DCN351 (José Expósito) [RHEL-75958]
  - drm/amd/display: Update IPS sequential_ono requirement checks (José Expósito) [RHEL-75958]
  - drm/xe/vf: Fix guc_info debugfs for VFs (José Expósito) [RHEL-75958]
  - drm/xe: Use copy_from_user() instead of __copy_from_user() (José Expósito) [RHEL-75958]
  - drm/amdgpu/gfx7: fix CSIB handling (José Expósito) [RHEL-75958]
  - drm/ttm/tests: fix incorrect assert in ttm_bo_unreserve_bulk() (José Expósito) [RHEL-75958]
  - drm/amd/display: fix zero value for APU watermark_c (José Expósito) [RHEL-75958]
  - drm: panel-orientation-quirks: Add ZOTAC Gaming Zone (José Expósito) [RHEL-75958]
  - drm/amdgpu/gfx10: fix CSIB handling (José Expósito) [RHEL-75958]
  - drm/amd/display: Do Not Consider DSC if Valid Config Not Found (José Expósito) [RHEL-75958]
  - drm/amdgpu: Add basic validation for RAS header (José Expósito) [RHEL-75958]
  - drm/amd/display: Skip to enable dsc if it has been off (José Expósito) [RHEL-75958]
  - drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() (José Expósito) [RHEL-75958]
  - drm/nouveau/gsp: fix rm shutdown wait condition (José Expósito) [RHEL-75958]
  - drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (José Expósito) [RHEL-75958]
  - drm/nouveau: fix hibernate on disabled GPU (José Expósito) [RHEL-75958]
  - drm/amdgpu/gfx11: fix CSIB handling (José Expósito) [RHEL-75958]
  - drm/amdkfd: Drop workaround for GC v9.4.3 revID 0 (José Expósito) [RHEL-75958]
  - drm/bridge: anx7625: change the gpiod_set_value API (José Expósito) [RHEL-75958]
  - drm/panthor: Don't update MMU_INT_MASK in panthor_mmu_irq_handler() (José Expósito) [RHEL-75958]
  - drm/bridge: anx7625: enable HPD interrupts (José Expósito) [RHEL-75958]
  - drm/panel/sharp-ls043t1le01: Use _multi variants (José Expósito) [RHEL-75958]
  - drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() (José Expósito) [RHEL-75958]
  - drm/xe: Fix CFI violation when accessing sysfs files (José Expósito) [RHEL-75958]
  - drm/amd/display: DCN32 null data check (José Expósito) [RHEL-75958]
  - drm/amdgpu: Fix API status offset for MES queue reset (José Expósito) [RHEL-75958]
  - drm/dp: add option to disable zero sized address only transactions. (José Expósito) [RHEL-75958]
  - drm/amdgpu/gfx6: fix CSIB handling (José Expósito) [RHEL-75958]
  - drm/bridge: select DRM_KMS_HELPER for AUX_BRIDGE (José Expósito) [RHEL-75958]
  - drm/amd/display: disable DPP RCG before DPP CLK enable (José Expósito) [RHEL-75958]
  - accel/ivpu: Fix warning in ivpu_gem_bo_free() (José Expósito) [RHEL-75958]
  - accel/ivpu: Use dma_resv_lock() instead of a custom mutex (José Expósito) [RHEL-75958]
  - accel/ivpu: Trigger device recovery on engine reset/resume failure (José Expósito) [RHEL-75958]
  - accel/ivpu: Use firmware names from upstream repo (José Expósito) [RHEL-75958]
  - accel/ivpu: Improve buffer object logging (José Expósito) [RHEL-75958]
  - drm/xe/lrc: Use a temporary buffer for WA BB (José Expósito) [RHEL-75958]
  - drm/xe/pxp: Clarify PXP queue creation behavior if PXP is not ready (José Expósito) [RHEL-75958]
  - drm/xe/pxp: Use the correct define in the set_property_funcs array (José Expósito) [RHEL-75958]
  - drm/xe: Rework eviction rejection of bound external bos (José Expósito) [RHEL-75958]
  - drm/xe/vsec: fix CONFIG_INTEL_VSEC dependency (José Expósito) [RHEL-75958]
  - drm/xe/vm: move xe_svm_init() earlier (José Expósito) [RHEL-75958]
  - drm/panel-simple: fix the warnings for the Evervision VGG644804 (José Expósito) [RHEL-75958]
  - drm/i915/display: Fix u32 overflow in SNPS PHY HDMI PLL setup (José Expósito) [RHEL-75958]
  - drm/amdgpu/gfx10: Refine Cleaner Shader for GFX10.1.10 (José Expósito) [RHEL-75958]
  - drm/i915/guc: Handle race condition where wakeref count drops below 0 (José Expósito) [RHEL-75958]
  - drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP (José Expósito) [RHEL-75958]
  - drm/i915/guc: Check if expecting reply before decrementing outstanding_submission_g2h (José Expósito) [RHEL-75958]
  - drm/xe: Add missing documentation of rpa_freq (José Expósito) [RHEL-75958]
  - drm/xe: Make xe_gt_freq part of the Documentation (José Expósito) [RHEL-75958]
  - drm/bridge: analogix_dp: Fix clk-disable removal (José Expósito) [RHEL-75958]
  - drm/bridge: analogix_dp: Add support to get panel from the DP AUX bus (José Expósito) [RHEL-75958]
  - drm/bridge: analogix_dp: Remove CONFIG_PM related check in analogix_dp_bind()/analogix_dp_unbind() (José Expósito) [RHEL-75958]
  - accel/ivpu: Reorder Doorbell Unregister and Command Queue Destruction (José Expósito) [RHEL-75958]
  - drm/bridge: analogix_dp: Remove the unnecessary calls to clk_disable_unprepare() during probing (José Expósito) [RHEL-75958]
  - drm/connector: only call HDMI audio helper plugged cb if non-null (José Expósito) [RHEL-75958]
  - drm/panic: Use a decimal fifo to avoid u64 by u64 divide (José Expósito) [RHEL-75958]
  - drm/panic: clean Clippy warning (José Expósito) [RHEL-75958]
  - drm/xe/guc: Make creation of SLPC debugfs files conditional (José Expósito) [RHEL-75958]
  - drm/xe/guc: Don't expose GuC privileged debugfs files if VF (José Expósito) [RHEL-75958]
  - drm/xe/guc: Refactor GuC debugfs initialization (José Expósito) [RHEL-75958]
  - drm/i915/dp_mst: Use the correct connector while computing the link BPP limit on MST (José Expósito) [RHEL-75958]
  - drm/amd/display: Don't check for NULL divisor in fixpt code (José Expósito) [RHEL-75958]
  - drm/tegra: rgb: Fix the unbound reference count (José Expósito) [RHEL-75958]
  - drm/vkms: Adjust vkms_state->active_planes allocation type (José Expósito) [RHEL-75958]
  - drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (José Expósito) [RHEL-75958]
  - drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe() (José Expósito) [RHEL-75958]
  - drm/panel: samsung-sofef00: Drop s6e3fc2x01 support (José Expósito) [RHEL-75958]
  - drm/amdgpu: Refine Cleaner Shader MEC firmware version for GFX10.1.x GPUs (José Expósito) [RHEL-75958]
  - drm/panthor: Fix the panthor_gpu_coherency_init() error path (José Expósito) [RHEL-75958]
  - drm/panthor: Update panthor_mmu::irq::mask when needed (José Expósito) [RHEL-75958]
  - drm/panthor: Call panthor_gpu_coherency_init() after PM resume() (José Expósito) [RHEL-75958]
  - drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions (José Expósito) [RHEL-75958]
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (José Expósito) [RHEL-75958]
  - drm/xe/d3cold: Set power state to D3Cold during s2idle/s3 (José Expósito) [RHEL-75958]
  - drm/vmwgfx: Fix dumb buffer leak (José Expósito) [RHEL-75958]
  - drm/ci: fix merge request rules (José Expósito) [RHEL-75958]
  - drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource (José Expósito) [RHEL-75958]
  - drm/vmwgfx: Add seqno waiter for sync_files (José Expósito) [RHEL-75958]
  - Revert "drm/amd/display: more liberal vmin/vmax update for freesync" (José Expósito) [RHEL-75958]
  - redhat/configs: automotive: Disable CONFIG_NUMA config (Dorinda Bassey) [RHEL-86292]
  - cpufreq: Fix setting policy limits when frequency tables are used (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Avoid using inconsistent policy->min and policy->max (Mark Langsdorf) [RHEL-83800]
  - cpufreq: fix compile-test defaults (Mark Langsdorf) [RHEL-83800]
  - cpufreq: cppc: Fix invalid return value in .get() callback (Mark Langsdorf) [RHEL-83800]
  - cpufreq: intel_pstate: Fix hwp_get_cpu_scaling() (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Enable ITMT support after initializing core rankings (Mark Langsdorf) [RHEL-83800]
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Do not enable by default during compile testing (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-83800]
  - cpufreq: sun50i: prevent out-of-bounds access (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Reference count policy in cpufreq_update_limits() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Init cpufreq only for present CPUs (Mark Langsdorf) [RHEL-83800]
  - cpufreq: tegra186: Share policy per cluster (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Fix min_limit perf and freq updation for performance governor (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Drop actions in amd_pstate_epp_cpu_offline() (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Stop caching EPP (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Rework CPPC enabling (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Drop debug statements for policy setting (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Update cppc_req_cached for shared mem EPP writes (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Move all EPP tracing into *_update_perf and *_set_epp functions (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Cache CPPC request in shared mem case too (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Replace all AMD_CPPC_* macros with masks (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate-ut: Adjust variable scope (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate-ut: Run on all of the correct CPUs (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate-ut: Drop SUCCESS and FAIL enums (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate-ut: Allow lowest nonlinear and lowest to be the same (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate-ut: Use _free macro to free put policy (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Drop `cppc_cap1_cached` (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Overhaul locking (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Move perf values into a union (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Drop min and max cached frequencies (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Show a warning when a CPU fails to setup (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Fix the clamping of perf values (Mark Langsdorf) [RHEL-83800]
  - cpufreq: tegra194: Allow building for Tegra234 (Mark Langsdorf) [RHEL-83800]
  - cpufreq: intel_pstate: Avoid SMP calls to get cpu-type (Mark Langsdorf) [RHEL-83800]
  - cpufreq: ppc_cbe: Remove powerpc Cell driver (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Remove the unncecessary driver_lock in amd_pstate_update_limits (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Use scope based cleanup for cpufreq_policy refs (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Remove the unnecessary cpufreq_update_policy call (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Modularize perf<->freq conversion (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Convert all perf values to u8 (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Pass min/max_limit_perf as min/max_perf to amd_pstate_update (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Remove the redundant des_perf clamping in adjust_perf (Mark Langsdorf) [RHEL-83800]
  - cpufreq/amd-pstate: Modify the min_perf calculation in adjust_perf callback (Mark Langsdorf) [RHEL-83800]
  - cpufreq: intel_pstate: Relocate platform preference check (Mark Langsdorf) [RHEL-83800]
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: enable 1200Mhz clock speed for armada-37xx (Mark Langsdorf) [RHEL-83800]
  - cpufreq: intel_pstate: Make it possible to avoid enabling CAS (Mark Langsdorf) [RHEL-83800]
  - cpufreq: qcom: Set .set_boost directly (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Remove cpufreq_enable_boost_support() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: staticize policy_has_boost_freq() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: cppc: Set policy->boost_supported (Mark Langsdorf) [RHEL-83800]
  - cpufreq: apple: Set .set_boost directly (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Restrict enabling boost on policies with no boost frequencies (Mark Langsdorf) [RHEL-83800]
  - cpufreq: amd: Set policy->boost_supported (Mark Langsdorf) [RHEL-83800]
  - cpufreq: dt: Set .set_boost directly (Mark Langsdorf) [RHEL-83800]
  - cpufreq: scmi: Set .set_boost directly (Mark Langsdorf) [RHEL-83800]
  - cpufreq: powernv: Set .set_boost directly (Mark Langsdorf) [RHEL-83800]
  - cpufreq: speedstep: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Export cpufreq_boost_set_sw() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: vexpress: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Stop checking for duplicate available/boost freq attributes (Mark Langsdorf) [RHEL-83800]
  - cpufreq: tegra: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: virtual: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Remove cpufreq_generic_attrs (Mark Langsdorf) [RHEL-83800]
  - cpufreq: staticize cpufreq_boost_trigger_state() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: powernv: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83800]
  - cpufreq: sc520_freq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: spear: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: scmi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: powernow: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: scpi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: sh: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: pmac: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: qoriq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: qcom: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: imx6q: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: davinci: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: kirkwood: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: p4: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: omap: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: e_powersaver: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: elanfreq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: pasemi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: mediatek: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: acpi: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83800]
  - cpufreq: brcmstb: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Always create freq-table related sysfs file (Mark Langsdorf) [RHEL-83800]
  - cpufreq: bmips: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: dt: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: apple: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83800]
  - cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Mark Langsdorf) [RHEL-83800]
  - cpufreq: scpi: compare kHz instead of Hz (Mark Langsdorf) [RHEL-83800]
  - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: ACPI: Re-sync CPU boost state on system resume (Mark Langsdorf) [RHEL-83800]
  - cpufreq: acpi: Set policy->boost_supported (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Introduce policy->boost_supported flag (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Use str_enable_disable() helper (Mark Langsdorf) [RHEL-83800]
  - cpufreq: prevent NULL dereference in cpufreq_online() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: ACPI: Remove set_boost in acpi_cpufreq_cpu_init() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Introduce a more generic way to set default per-policy boost flag (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Fix re-boost issue after hotplugging a CPU (Mark Langsdorf) [RHEL-83800]
  - cpufreq: s3c64xx: Fix compilation warning (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Use str_enable_disable()-like helpers (Mark Langsdorf) [RHEL-83800]
  - cpufreq: ACPI: Fix max-frequency computation (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Move endif to the end of Kconfig file (Mark Langsdorf) [RHEL-83800]
  - cpufreq: sparc: change kzalloc to kcalloc (Mark Langsdorf) [RHEL-83800]
  - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks (Mark Langsdorf) [RHEL-83800]
  - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available (Mark Langsdorf) [RHEL-83800]
  - cpufreq: apple-soc: Add Apple A7-A8X SoC cpufreq support (Mark Langsdorf) [RHEL-83800]
  - cpufreq: apple-soc: Set fallback transition latency to APPLE_DVFS_TRANSITION_TIMEOUT (Mark Langsdorf) [RHEL-83800]
  - cpufreq: apple-soc: Increase cluster switch timeout to 400us (Mark Langsdorf) [RHEL-83800]
  - cpufreq: apple-soc: Use 32-bit read for status register (Mark Langsdorf) [RHEL-83800]
  - cpufreq: apple-soc: Allow per-SoC configuration of APPLE_DVFS_CMD_PS1 (Mark Langsdorf) [RHEL-83800]
  - cpufreq: apple-soc: Drop setting the PS2 field on M2+ (Mark Langsdorf) [RHEL-83800]
  - cpufreq: fix using cpufreq-dt as module (Mark Langsdorf) [RHEL-83800]
  - cpufreq: scmi: Register for limit change notifications (Mark Langsdorf) [RHEL-83800]
  - cpufreq: maple: Remove maple driver (Mark Langsdorf) [RHEL-83800]
  - cpufreq: ACPI: Simplify MSR read on the boot CPU (Mark Langsdorf) [RHEL-83800]
  - cpufreq: sun50i: add a100 cpufreq support (Mark Langsdorf) [RHEL-83800]
  - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: scmi: Fix cleanup path when boost enablement fails (Mark Langsdorf) [RHEL-83800]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (Mark Langsdorf) [RHEL-83800]
  - Revert "cpufreq: brcmstb-avs-cpufreq: Fix initial command check" (Mark Langsdorf) [RHEL-83800]
  - cpufreq: add virtual-cpufreq driver (Mark Langsdorf) [RHEL-83800]
  - redhat/configs: enable the virtual-cpufreq driver (Mark Langsdorf) [RHEL-83800]
  - cpufreq: Switch back to struct platform_driver::remove() (Mark Langsdorf) [RHEL-83800]
  - cpufreq: use proper units for frequency (Mark Langsdorf) [RHEL-83800]
  - cpufreq: ti-cpufreq: Remove revision offsets in AM62 family (Mark Langsdorf) [RHEL-83800]
  - cpufreq: ti-cpufreq: Allow backward compatibility for efuse syscon (Mark Langsdorf) [RHEL-83800]
  - cppc_cpufreq: Remove HiSilicon CPPC workaround (Mark Langsdorf) [RHEL-83800]
  - Re-enable vxcan (CONFIG_CAN_VXCAN) for automotive (Radu Rendec) [RHEL-83276]
  - redhat/configs: automotive: builtin virtio-mmio (Eric Chanudet) [RHEL-82312]
  - redhat/configs: automotive: set CONFIG_TIMEOUT_PANIC (Enric Balletbo i Serra) [RHEL-76119]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-119.el10]
changelog:
  - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106627] {CVE-2025-38380}
  - ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-104246]
  - ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-104246]
  - ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-104246]
  - ice: wait before enabling TSPLL (Petr Oros) [RHEL-104246]
  - ice: add multiple TSPLL helpers (Petr Oros) [RHEL-104246]
  - ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-104246]
  - ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-104246]
  - ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-104246]
  - ice: add TSPLL log config helper (Petr Oros) [RHEL-104246]
  - ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-104246]
  - ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-104246]
  - ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-104246]
  - ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-104246]
  - ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-104246]
  - ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-104246]
  - ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-104246]
  - ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-104246]
  - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode (Corinna Vinschen) [RHEL-105952]
  - dpll: add phase_offset_monitor_get/set callback ops (Ivan Vecera) [RHEL-104979]
  - dpll: add phase-offset-monitor feature to netlink spec (Ivan Vecera) [RHEL-104979]
  - net_sched: ets: fix a race in ets_qdisc_change() (Davide Caratti) [RHEL-96604] {CVE-2025-38107}
  - net_sched: sch_sfq: reject invalid perturb period (Davide Caratti) [RHEL-96604] {CVE-2025-38193}
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling (Davide Caratti) [RHEL-96604] {CVE-2025-38115}
  - net_sched: prio: fix a race in prio_tune() (Davide Caratti) [RHEL-96604] {CVE-2025-38083}
  - net_sched: red: fix a race in __red_change() (Davide Caratti) [RHEL-96604] {CVE-2025-38108}
  - net_sched: tbf: fix a race in tbf_change() (Davide Caratti) [RHEL-96604]
  - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101222] {CVE-2025-38086}
  - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-79686]
  - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-79686]
  - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-79686]
  - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-79686]
  - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-78633 RHEL-79686] {CVE-2025-22065}
  - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-79686] {CVE-2025-22116}
  - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-79686] {CVE-2025-21890}
  - libeth: move idpf_rx_csum_decoded and idpf_rx_extracted (Michal Schmidt) [RHEL-79686]
  - idpf: record rx queue in skb for RSC packets (Michal Schmidt) [RHEL-79686]
  - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-79686]
  - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-79686]
  - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-79686]
  - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-79686 RHEL-82472] {CVE-2024-58057}
  - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-79686]
  - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-79686]
  - redhat/configs: automotive: Disable CONFIG_FS_DAX config (Dorinda Bassey) [RHEL-87374]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-120.el10]
changelog:
  - mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-100684]
  - net: add debug check in skb_reset_mac_header() (Davide Caratti) [RHEL-96625]
  - net: skb_reset_mac_len() must check if mac_header was set (Davide Caratti) [RHEL-96625]
  - vlan: enforce underlying device type (CKI Backport Bot) [RHEL-96625] {CVE-2025-21920}
  - kernel.spec: add conditional to include rhel trusted certificates (Eric Chanudet) [RHEL-78808]
  - kernel.spec: Always BuildRequire openssl-devel (Eric Chanudet) [RHEL-78808]
  - kernel.spec: automotive: disable kernel signature by default (Eric Chanudet) [RHEL-78808]
  - redhat/configs: automotive: enable extra system cert (Eric Chanudet) [RHEL-78808]
  - redhat/configs: automotive: Disable module signature with modules_install (Eric Chanudet) [RHEL-78808]
  - xfs: do not check NEEDSREPAIR if ro,norecovery mount. (CKI Backport Bot) [RHEL-101641]
  - iavf: fix reset_task for early reset event (Michal Schmidt) [RHEL-83568]
  - iavf: add support for Rx timestamps to hotpath (Michal Schmidt) [RHEL-83568]
  - iavf: handle set and get timestamps ops (Michal Schmidt) [RHEL-83568]
  - iavf: periodically cache PHC time (Michal Schmidt) [RHEL-83568]
  - iavf: add support for indirect access to PHC time (Michal Schmidt) [RHEL-83568]
  - iavf: add initial framework for registering PTP clock (Michal Schmidt) [RHEL-83568]
  - iavf: negotiate PTP capabilities (Michal Schmidt) [RHEL-83568]
  - iavf: add support for negotiating flexible RXDID format (Michal Schmidt) [RHEL-83568]
  - iavf: Implement checking DD desc field (Michal Schmidt) [RHEL-83568]
  - iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors (Michal Schmidt) [RHEL-83568]
  - iavf: define Rx descriptors as qwords (Michal Schmidt) [RHEL-83568]
  - iavf: allow changing VLAN state without calling PF (Michal Schmidt) [RHEL-83568]
  - iavf: Remove unused declarations (Michal Schmidt) [RHEL-83568]
  - iavf: add support to exchange qos capabilities (Michal Schmidt) [RHEL-83568]
  - iavf: Add net_shaper_ops support (Michal Schmidt) [RHEL-83568]
  - redhat/configs: automotive: Enable CONFIG_BOOTPARAM_HUNG_TASK_PANIC config (Dorinda Bassey) [RHEL-87368]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-121.el10]
changelog:
  - Revert "drm/gem-dma: Use dma_buf from GEM object instance" (José Expósito) [RHEL-106712]
  - Revert "drm/gem-shmem: Use dma_buf from GEM object instance" (José Expósito) [RHEL-106712]
  - Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance" (José Expósito) [RHEL-106712]
  - Revert "drm/prime: Use dma_buf from GEM object instance" (José Expósito) [RHEL-106712]
  - drm/framebuffer: Acquire internal references on GEM handles (José Expósito) [RHEL-106712]
  - drm/gem: Acquire references on GEM handles for framebuffers (CKI Backport Bot) [RHEL-106712] {CVE-2025-38449}
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (Steve Best) [RHEL-23893]
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107700]
  - PCI/MSI: Handle lack of irqdomain gracefully (Frank Liang) [RHEL-107953]
  - arch: x86: add IPC mailbox accessor function and add SoC register access (CKI Backport Bot) [RHEL-105090]
  - i40e: When removing VF MAC filters, only check PF-set MAC (Jamie Bainbridge) [RHEL-104947]
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CKI Backport Bot) [RHEL-93568] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (CKI Backport Bot) [RHEL-93568] {CVE-2025-22121}
  - ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93605] {CVE-2025-22113}
  - ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93605] {CVE-2025-22113}
  - ALSA: enable AMD legacy SoundWire mach (Jaroslav Kysela) [RHEL-101626]
  - ALSA: revert aarch64 kunit test workaround (Jaroslav Kysela) [RHEL-101626]
  - ASoC: SDCA: Allow read-only controls to be deferrable (Jaroslav Kysela) [RHEL-101626]
  - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (Jaroslav Kysela) [RHEL-101626]
  - ASoC: SDCA: Fixup some kernel doc errors (Jaroslav Kysela) [RHEL-101626]
  - ASoC: SDCA: Add missing default in switch in entity_pde_event() (Jaroslav Kysela) [RHEL-101626]
  - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (Jaroslav Kysela) [RHEL-101626]
  - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (Jaroslav Kysela) [RHEL-101626]
  - ASoC: SDCA: Update memory allocations to zero initialise (Jaroslav Kysela) [RHEL-101626]
  - ASoC: mediatek: common: fix device and OF node leak (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek: Fix mute LED mask on HP OMEN 16 laptop (Jaroslav Kysela) [RHEL-101626]
  - sof-client-ipc-flood-test: don't mess with ->d_name (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA (Jaroslav Kysela) [RHEL-101626]
  - ALSA: compress_offload: tighten ioctl command number checks (Jaroslav Kysela) [RHEL-101626]
  - soundwire: Revert "soundwire: qcom: Add set_channel_map api support" (Jaroslav Kysela) [RHEL-101626] {CVE-2025-38486}
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r0xxx (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek: Add quirks for some Clevo laptops (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100 (Jaroslav Kysela) [RHEL-101626]
  - ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 6 G1a (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606 (Jaroslav Kysela) [RHEL-101626]
  - ASoC: rt721-sdca: fix boost gain calculation error (Jaroslav Kysela) [RHEL-101626]
  - ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. (Jaroslav Kysela) [RHEL-101626] {CVE-2025-38438}
  - ASoC: Intel: sof-function-topology-lib: Print out the unsupported dmic count (Jaroslav Kysela) [RHEL-101626]
  - ASoC: fsl_sai: Force a software reset when starting in consumer mode (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fb2xxx (Jaroslav Kysela) [RHEL-101626]
  - ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp() (Jaroslav Kysela) [RHEL-101626] {CVE-2025-38454}
  - ASoC: cs35l56: probe() should fail if the device ID is not recognized (Jaroslav Kysela) [RHEL-101626]
  - ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches (Jaroslav Kysela) [RHEL-101626]
  - ASoC: Intel: soc-acpi-intel-arl-match: set get_function_tplg_files ops (Jaroslav Kysela) [RHEL-101626]
  - ASoC: Intel: add sof_sdw_get_tplg_files ops (Jaroslav Kysela) [RHEL-101626]
  - ASoC: soc-acpi: add get_function_tplg_files ops (Jaroslav Kysela) [RHEL-101626]
  - ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select SND_SOC_ACPI_INTEL_MATCH (Jaroslav Kysela) [RHEL-101626]
  - ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode (Jaroslav Kysela) [RHEL-101626]
  - ASoC: amd: yc: update quirk data for HP Victus (Jaroslav Kysela) [RHEL-101626]
  - ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic (Jaroslav Kysela) [RHEL-101626]
  - ALSA: sb: Force to disable DMAs once when DMA mode is changed (Jaroslav Kysela) [RHEL-101626]
  - ALSA: sb: Don't allow changing the DMA mode during operations (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (Jaroslav Kysela) [RHEL-101626]
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Jaroslav Kysela) [RHEL-101626] {CVE-2025-38249}
  - ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 (Jaroslav Kysela) [RHEL-101626]
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies (Jaroslav Kysela) [RHEL-101626] {CVE-2025-38259}
  - ASoC: codec: wcd9335: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-101626]
  - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda: Add new pci id for AMD GPU display HD audio controller (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda: Ignore unsol events for cards being shut down (Jaroslav Kysela) [RHEL-101626]
  - ASoC: rt1320: fix speaker noise when volume bar is 100% (Jaroslav Kysela) [RHEL-101626]
  - soundwire: amd: add check for status update registers (Jaroslav Kysela) [RHEL-101626]
  - soundwire: amd: fix for clearing command status register (Jaroslav Kysela) [RHEL-101626]
  - ASoC: amd: ps: fix for soundwire failures during hibernation exit sequence (Jaroslav Kysela) [RHEL-101626]
  - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (Jaroslav Kysela) [RHEL-101626]
  - soundwire: amd: serialize amd manager resume sequence during pm_prepare (Jaroslav Kysela) [RHEL-101626]
  - soundwire: amd: fix for handling slave alerts after link is down (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek: Add quirk for Asus GU605C (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP Victus 15-fa1xxx (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Jaroslav Kysela) [RHEL-101626]
  - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card (Jaroslav Kysela) [RHEL-101626]
  - ASoC: tegra210_ahub: Add check to of_device_get_match_data() (Jaroslav Kysela) [RHEL-101626]
  - ASoC: simple-card-utils: fixup dlc->xxx handling for error case (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios laptops (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda/realtek: Add support for Acer Helios Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-101626]
  - ASoC: intel/sdw_utils: Assign initial value in asoc_sdw_rt_amp_spk_rtd_init() (Jaroslav Kysela) [RHEL-101626]
  - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change (Jaroslav Kysela) [RHEL-101626]
  - ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9 (Jaroslav Kysela) [RHEL-101626]
  - ASoC: codecs: wcd937x: Drop unused buck_supply (Jaroslav Kysela) [RHEL-101626]
  - ASoC: codecs: wcd9375: Fix double free of regulator supplies (Jaroslav Kysela) [RHEL-101626] {CVE-2025-38423}
  - ASoC: amd: sof_amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-101626]
  - ASoC: amd: amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-101626]
  - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Jaroslav Kysela) [RHEL-101626]
  - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (Jaroslav Kysela) [RHEL-101626]
  - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 (Jaroslav Kysela) [RHEL-101626]
  - ALSA: usb-audio: Kill timer properly at removal (Jaroslav Kysela) [RHEL-101626] {CVE-2025-38105}
  - ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init (Jaroslav Kysela) [RHEL-101626]
  - ASoC: Intel: avs: Verify content returned by parse_int_array() (Jaroslav Kysela) [RHEL-101626] {CVE-2025-38307}
  - ASoC: Intel: avs: Fix paths in MODULE_FIRMWARE hints (Jaroslav Kysela) [RHEL-101626]
  - ASoC: Intel: avs: Relocate DSP status registers (Jaroslav Kysela) [RHEL-101626]
  - ASoC: Intel: avs: Read HW capabilities when possible (Jaroslav Kysela) [RHEL-101626]
  - ASoC: Intel: avs: Ignore Vendor-space manipulation for ACE (Jaroslav Kysela) [RHEL-101626]
  - ASoC: Intel: avs: Fix PPLCxFMT calculation (Jaroslav Kysela) [RHEL-101626]
  - ASoC: Intel: avs: PCM operations for LNL-based platforms (Jaroslav Kysela) [RHEL-101626]
  - ALSA: hda: Allow to fetch hlink by ID (Jaroslav Kysela) [RHEL-101626]
  - soundwire: only compute port params in specific stream states (Jaroslav Kysela) [RHEL-101626]
  - ALSA: core: fix up bus match const issues. (Jaroslav Kysela) [RHEL-101626]
  - ASoC: apple: mca: Constrain channels according to TDM mask (Jaroslav Kysela) [RHEL-101626]
  - ASoC: SOF: amd: add missing acp descriptor field (Jaroslav Kysela) [RHEL-101626]
  - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type (Jaroslav Kysela) [RHEL-101626]
  - ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() (Jaroslav Kysela) [RHEL-101626] {CVE-2025-38299}
  - ASoC: tas2764: Enable main IRQs (Jaroslav Kysela) [RHEL-101626]
  - ASoC: tas2764: Reinit cache on part reset (Jaroslav Kysela) [RHEL-101626]
  - ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX (Jaroslav Kysela) [RHEL-101626]
  - ASoC: codecs: hda: Fix RPM usage count underflow (Jaroslav Kysela) [RHEL-101626]
  - ixgbe: add support for FW rollback mode (Corinna Vinschen) [RHEL-99409]
  - ixgbe: add E610 implementation of FW recovery mode (Corinna Vinschen) [RHEL-99409]
  - ixgbe: add FW API version check (Corinna Vinschen) [RHEL-99409]
  - ixgbe: add support for devlink reload (Corinna Vinschen) [RHEL-99409]
  - ixgbe: add device flash update via devlink (Corinna Vinschen) [RHEL-99409]
  - ixgbe: extend .info_get() with stored versions (Corinna Vinschen) [RHEL-99409]
  - ixgbe: add E610 functions getting PBA and FW ver info (Corinna Vinschen) [RHEL-99409]
  - ixgbe: add .info_get extension specific for E610 devices (Corinna Vinschen) [RHEL-99409]
  - ixgbe: read the netlist version information (Corinna Vinschen) [RHEL-99409]
  - ixgbe: read the OROM version information (Corinna Vinschen) [RHEL-99409]
  - ixgbe: add E610 functions for acquiring flash data (Corinna Vinschen) [RHEL-99409]
  - ixgbe: add handler for devlink .info_get() (Corinna Vinschen) [RHEL-99409]
  - ixgbe: add initial devlink support (Corinna Vinschen) [RHEL-99409]
  - ixgbe: wrap netdev_priv() usage (Corinna Vinschen) [RHEL-99409]
  - ixgbe: Fix unreachable retry logic in combined and byte I2C write functions (Corinna Vinschen) [RHEL-99409]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99409]
  - ixgbe: fix media type detection for E610 device (Corinna Vinschen) [RHEL-86538 RHEL-99409]
  - ixgbe: add support for thermal sensor event reception (Corinna Vinschen) [RHEL-99409]
  - ixgbe: add PTP support for E610 device (Corinna Vinschen) [RHEL-99409]
  - ixgbe: fix media cage present detection for E610 device (Corinna Vinschen) [RHEL-80417 RHEL-99409]
  - ixgbe: Fix possible skb NULL pointer dereference (Corinna Vinschen) [RHEL-99409]
  - ixgbevf: Fix passing 0 to ERR_PTR in ixgbevf_run_xdp() (Corinna Vinschen) [RHEL-99409]
  - ixgbe: Fix passing 0 to ERR_PTR in ixgbe_run_xdp() (Corinna Vinschen) [RHEL-99409]
  - ixgbevf: Remove unused ixgbevf_hv_mbx_ops (Corinna Vinschen) [RHEL-99409]
  - ixgbevf: Add support for Intel(R) E610 device (Corinna Vinschen) [RHEL-80417 RHEL-99409]
  - PCI: Add PCI_VDEVICE_SUB helper macro (Corinna Vinschen) [RHEL-80417 RHEL-99409]
  - ixgbe: Enable link management in E610 device (Corinna Vinschen) [RHEL-80417 RHEL-99409]
  - ixgbe: Clean up the E610 link management related code (Corinna Vinschen) [RHEL-80417 RHEL-99409]
  - ixgbe: Add ixgbe_x540 multiple header inclusion protection (Corinna Vinschen) [RHEL-80417 RHEL-99409]
  - ixgbe: Add support for EEPROM dump in E610 device (Corinna Vinschen) [RHEL-80417 RHEL-99409]
  - ixgbe: Add support for NVM handling in E610 device (Corinna Vinschen) [RHEL-80417 RHEL-99409]
  - ixgbe: Add link management support for E610 device (Corinna Vinschen) [RHEL-80417 RHEL-99409]
  - ixgbe: Add support for E610 device capabilities detection (Corinna Vinschen) [RHEL-80417 RHEL-99409]
  - ixgbe: Add support for E610 FW Admin Command Interface (Corinna Vinschen) [RHEL-80417 RHEL-99409]
  - ixgbe: Correct BASE-BX10 compliance code (Corinna Vinschen) [RHEL-99409]
  - ixgbe: downgrade logging of unsupported VF API version to debug (Corinna Vinschen) [RHEL-99409]
  - ixgbe: Break include dependency cycle (Corinna Vinschen) [RHEL-99409]
  - configs: new config in drivers/phy (Izabela Bakollari) [RHEL-75590]
  - ixgene-v2: prepare for phylib stop exporting phy_10_100_features_array (Izabela Bakollari) [RHEL-75590]
  - net: gianfar: simplify init_phy() (Izabela Bakollari) [RHEL-75590]
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Izabela Bakollari) [RHEL-75590]
  - r8169: make Kconfig option for LED support user-visible (Izabela Bakollari) [RHEL-75590]
  - r8169: add PHY c45 ops for MDIO_MMD_VENDOR2 registers (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip: limit 100M workaround to link-down events on LAN88xx (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits (Izabela Bakollari) [RHEL-75590]
  - net: mdio: mdio-i2c: Add support for single-byte SMBus operations (Izabela Bakollari) [RHEL-75590]
  - net: usb: asix: ax88772: Increase phy_name size (Izabela Bakollari) [RHEL-75590]
  - net: aquantia: Use HWMON_CHANNEL_INFO macro to simplify code (Izabela Bakollari) [RHEL-75590]
  - gpio: cdev: use raw notifier for line state events (Izabela Bakollari) [RHEL-75590]
  - gpiolib: fix a NULL-pointer dereference when setting direction (Izabela Bakollari) [RHEL-75590]
  - gpiolib: notify user-space about in-kernel line state changes (Izabela Bakollari) [RHEL-75590]
  - gpiolib: switch the line state notifier to atomic (Izabela Bakollari) [RHEL-75590]
  - gpio: cdev: put emitting the line state events on a workqueue (Izabela Bakollari) [RHEL-75590]
  - gpio: cdev: prepare gpio_desc_to_lineinfo() for being called from atomic (Izabela Bakollari) [RHEL-75590]
  - gpio: cdev: go back to storing debounce period in the GPIO descriptor (Izabela Bakollari) [RHEL-75590]
  - gpiolib: unduplicate chip guard in set_config path (Izabela Bakollari) [RHEL-75590]
  - gpiolib: notify user-space when a driver requests its own desc (Izabela Bakollari) [RHEL-75590]
  - gpiolib: avoid format string weakness in workqueue interface (Izabela Bakollari) [RHEL-75590]
  - dt-bindings: net: dp83822: add constraints for mac-termination-ohms (Izabela Bakollari) [RHEL-75590]
  - dt-bindings: net: ethernet-phy: add property mac-termination-ohms (Izabela Bakollari) [RHEL-75590]
  - dt-bindings: net: Document support for Aeonsemi PHYs (Izabela Bakollari) [RHEL-75590]
  - dt-bindings: net: ethernet-phy: add property tx-amplitude-100base-tx-percent (Izabela Bakollari) [RHEL-75590]
  - dt-bindings: net: ethernet-phy: Add timing-role role property for ethernet PHYs (Izabela Bakollari) [RHEL-75590]
  - dt-bindings: net: dp83822: Add support for GPIO2 clock output (Izabela Bakollari) [RHEL-75590]
  - dt-bindings: net: tja11xx: add "nxp,rmii-refclk-out" property (Izabela Bakollari) [RHEL-75590]
  - dt-bindings: net: marvell,aquantia: add property to override MDI_CFG (Izabela Bakollari) [RHEL-75590]
  - net: phy: clear phydev->devlink when the link is deleted (Izabela Bakollari) [RHEL-75590]
  - net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: Add Airoha AN7583 PHY support (Izabela Bakollari) [RHEL-75590]
  - net: phy: mscc: Fix memory leak when using one step timestamping (Izabela Bakollari) [RHEL-75590]
  - net: phy: fix up const issues in to_mdio_device() and to_phy_device() (Izabela Bakollari) [RHEL-75590]
  - net: phy: add driver for MaxLinear MxL86110 PHY (Izabela Bakollari) [RHEL-75590]
  - net: phy: fixed_phy: constify status argument where possible (Izabela Bakollari) [RHEL-75590]
  - net: phy: fixed_phy: remove irq argument from fixed_phy_register (Izabela Bakollari) [RHEL-75590]
  - net: phy: fixed_phy: remove irq argument from fixed_phy_add (Izabela Bakollari) [RHEL-75590]
  - net: phy: Add support for Aeonsemi AS21xxx PHYs (Izabela Bakollari) [RHEL-75590]
  - net: phy: introduce genphy_match_phy_device() (Izabela Bakollari) [RHEL-75590]
  - net: phy: nxp-c45-tja11xx: simplify .match_phy_device OP (Izabela Bakollari) [RHEL-75590]
  - net: phy: bcm87xx: simplify .match_phy_device OP (Izabela Bakollari) [RHEL-75590]
  - net: phy: pass PHY driver to .match_phy_device OP (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: add driver for built-in 2.5G ethernet PHY on MT7988 (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: Sort config and file names in Kconfig and Makefile (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: add RTL8127-internal PHY (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip: document where the LAN88xx PHYs are used (Izabela Bakollari) [RHEL-75590]
  - net: phy: fixed_phy: remove fixed_phy_register_with_gpiod (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove stub for mdiobus_register_board_info (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: Enable temperature measurement in probe again (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: do not require syscon compatible for pio property (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83867: use 2ns delay if not specified in DTB (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83867: remove check of delay strap configuration (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: Add support for PHY LEDs on RTL8211E (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: use __set_bit() in rtl8211f_led_hw_control_get() (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: Group RTL82* macro definitions (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: add RTL8211F register defines (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: Clean up RTL821x ExtPage access (Izabela Bakollari) [RHEL-75590]
  - net: phy: micrel: remove KSZ9477 EEE quirks now handled by phylink (Izabela Bakollari) [RHEL-75590]
  - net: phy: Refactor fwnode_get_phy_node() (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: Add support for WOL magic packet on RTL8211F (Izabela Bakollari) [RHEL-75590]
  - net: phy: aquantia: fix commenting format (Izabela Bakollari) [RHEL-75590]
  - net: phylink: Drop unused defines for SUPPORTED/ADVERTISED_INTERFACES (Izabela Bakollari) [RHEL-75590]
  - net: dp83822: Fix OF_MDIO config check (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: Enable temperature sensor for mv88q211x (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove function stubs (Izabela Bakollari) [RHEL-75590]
  - net: phy: leds: fix memory leak (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83822: Add support for changing the MAC termination (Izabela Bakollari) [RHEL-75590]
  - net: phy: Add helper for getting MAC termination resistance (Izabela Bakollari) [RHEL-75590]
  - net: phylink: fix suspend/resume with WoL enabled and link down (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip: force IRQ polling mode for lan88xx (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: init val in .phy_led_polarity_set for AN7581 (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove redundant dependency on NETDEVICES for PHYLINK and PHYLIB (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove device_phy_find_device (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: add Airoha PHY ID to SoC driver (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: permit to compile test GE SOC PHY driver (Izabela Bakollari) [RHEL-75590]
  - net: phy: air_en8811h: Add clk provider for CKO pin (Izabela Bakollari) [RHEL-75590]
  - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (Izabela Bakollari) [RHEL-75590]
  - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() (Izabela Bakollari) [RHEL-75590]
  - net: phy: broadcom: Correct BCM5221 PHY model detection (Izabela Bakollari) [RHEL-75590]
  - net: phylink: force link down on major_config failure (Izabela Bakollari) [RHEL-75590]
  - net: phy: Introduce PHY_ID_SIZE — minimum size for PHY ID string (Izabela Bakollari) [RHEL-75590]
  - net: phy: aquantia: add essential functions to aqr105 driver (Izabela Bakollari) [RHEL-75590]
  - net: phy: aquantia: search for firmware-name in fwnode (Izabela Bakollari) [RHEL-75590]
  - net: phy: aquantia: add probe function to aqr105 for firmware loading (Izabela Bakollari) [RHEL-75590]
  - net: phy: Add swnode support to mdiobus_scan (Izabela Bakollari) [RHEL-75590]
  - net: phy: sfp: Add support for SMBus module access (Izabela Bakollari) [RHEL-75590]
  - net: phylink: add functions to block/unblock rx clock stop (Izabela Bakollari) [RHEL-75590]
  - net: phylink: add phylink_prepare_resume() (Izabela Bakollari) [RHEL-75590]
  - net: phylink: Remove unused function pointer from phylink structure (Izabela Bakollari) [RHEL-75590]
  - net: phy: fixed_phy: transition to the faux device interface (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83822: fix transmit amplitude if CONFIG_OF_MDIO not defined (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: disable PHY-mode EEE (Izabela Bakollari) [RHEL-75590]
  - net: phy: fix genphy_c45_eee_is_active() for disabled EEE (Izabela Bakollari) [RHEL-75590]
  - net: phy: phy_interface_t: Fix RGMII_TXID code comment (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: remove call to devm_hwmon_sanitize_name (Izabela Bakollari) [RHEL-75590]
  - net: phy: mxl-gpy: remove call to devm_hwmon_sanitize_name (Izabela Bakollari) [RHEL-75590]
  - net: phy: tja11xx: remove call to devm_hwmon_sanitize_name (Izabela Bakollari) [RHEL-75590]
  - broadcom: fix supported flag check in periodic output function (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell: Align set_loopback() implementation (Izabela Bakollari) [RHEL-75590]
  - net: phy: micrel: Add loopback support (Izabela Bakollari) [RHEL-75590]
  - net: phy: Support speed selection for PHY loopback (Izabela Bakollari) [RHEL-75590]
  - net: phy: Allow loopback speed selection for PHY drivers (Izabela Bakollari) [RHEL-75590]
  - phy: fix xa_alloc_cyclic() error handling (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove unused functions phy_package_[read|write]_mmd (Izabela Bakollari) [RHEL-75590]
  - net: phy: move PHY package MMD access function declarations from phy.h to phylib.h (Izabela Bakollari) [RHEL-75590]
  - net: phylink: Use phy_caps to get an interface's capabilities and modes (Izabela Bakollari) [RHEL-75590]
  - net: phylink: Convert capabilities to linkmodes using phy_caps (Izabela Bakollari) [RHEL-75590]
  - net: phylink: Add a mapping between MAC_CAPS and LINK_CAPS (Izabela Bakollari) [RHEL-75590]
  - net: phy: drop phy_settings and the associated lookup helpers (Izabela Bakollari) [RHEL-75590]
  - net: phylink: Use phy_caps_lookup for fixed-link configuration (Izabela Bakollari) [RHEL-75590]
  - net: phy: phy_device: Use link_capabilities lookup for PHY aneg config (Izabela Bakollari) [RHEL-75590]
  - net: phy: phy_caps: Don't skip better duplex macth on non-exact match (Izabela Bakollari) [RHEL-75590]
  - net: phy: phy_caps: Allow looking-up link caps based on speed and duplex (Izabela Bakollari) [RHEL-75590]
  - net: phy: phy_caps: Implement link_capabilities lookup by linkmode (Izabela Bakollari) [RHEL-75590]
  - net: phy: phy_caps: Introduce phy_caps_valid (Izabela Bakollari) [RHEL-75590]
  - net: phy: phy_caps: Move __set_linkmode_max_speed to phy_caps (Izabela Bakollari) [RHEL-75590]
  - net: phy: phy_caps: Move phy_speeds to phy_caps (Izabela Bakollari) [RHEL-75590]
  - net: phy: Use an internal, searchable storage for the linkmodes (Izabela Bakollari) [RHEL-75590]
  - net: phylink: Remove unused phylink_init_eee (Izabela Bakollari) [RHEL-75590]
  - net: phy: tja11xx: enable PHY in sleep mode for TJA1102S (Izabela Bakollari) [RHEL-75590]
  - net: phy: tja11xx: add support for TJA1102S (Izabela Bakollari) [RHEL-75590]
  - net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata (Izabela Bakollari) [RHEL-75590]
  - net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove remaining PHY package related definitions from phy.h (Izabela Bakollari) [RHEL-75590]
  - net: phy: move PHY package related code from phy.h to phy_package.c (Izabela Bakollari) [RHEL-75590]
  - net: phy: mscc: use new phy_package_shared getters (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: use new phy_package_shared getters (Izabela Bakollari) [RHEL-75590]
  - net: phy: micrel: use new phy_package_shared getters (Izabela Bakollari) [RHEL-75590]
  - net: phy: qca807x: use new phy_package_shared getters (Izabela Bakollari) [RHEL-75590]
  - net: phy: add getters for public members in struct phy_package_shared (Izabela Bakollari) [RHEL-75590]
  - net: phy: move PHY package code from phy_device.c to own source file (Izabela Bakollari) [RHEL-75590]
  - gpiolib: Align FLAG_* definitions in the struct gpio_desc (Izabela Bakollari) [RHEL-75590]
  - net: phy: nxp-c45-tja11xx: add support for TJA1121 (Izabela Bakollari) [RHEL-75590]
  - net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104 (Izabela Bakollari) [RHEL-75590]
  - net: phylink: use pl->link_interface in phylink_expects_phy() (Izabela Bakollari) [RHEL-75590]
  - net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module (Izabela Bakollari) [RHEL-75590]
  - net: phy: add phylib-internal.h (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove unused feature array declarations (Izabela Bakollari) [RHEL-75590]
  - net: phy: qcom: qca807x fix condition for DAC_DSP_BIAS_CURRENT (Izabela Bakollari) [RHEL-75590]
  - net: phy: qt2025: Fix hardware revision check comment (Izabela Bakollari) [RHEL-75590]
  - net: sfp: add quirk for 2.5G OEM BX SFP (Izabela Bakollari) [RHEL-75590]
  - net: phy: c45: remove local advertisement parameter from genphy_c45_eee_is_active (Izabela Bakollari) [RHEL-75590]
  - net: phy: c45: use cached EEE advertisement in genphy_c45_ethtool_get_eee (Izabela Bakollari) [RHEL-75590]
  - net: phy: c45: Don't silently remove disabled EEE modes any longer when writing advertisement register (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove disabled EEE modes from advertising_eee in phy_probe (Izabela Bakollari) [RHEL-75590]
  - net: phy: improve phy_disable_eee_mode (Izabela Bakollari) [RHEL-75590]
  - net: phy: move definition of phy_is_started before phy_disable_eee_mode (Izabela Bakollari) [RHEL-75590]
  - net: phy: rename phy_set_eee_broken to phy_disable_eee_mode (Izabela Bakollari) [RHEL-93673]
  - r8169: copy vendor driver 2.5G/5G EEE advertisement constraints (Izabela Bakollari) [RHEL-93673]
  - r8169: align RTL8126 EEE config with vendor driver (Izabela Bakollari) [RHEL-93673]
  - r8169: align RTL8125 EEE config with vendor driver (Izabela Bakollari) [RHEL-93673]
  - r8169: align RTL8125/RTL8126 PHY config with vendor driver (Izabela Bakollari) [RHEL-93673]
  - net: phy: realtek: add defines for shadowed c45 standard registers (Izabela Bakollari) [RHEL-75590]
  - gpiolib: protect gpio_chip with SRCU in array_info paths in multi get/set (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: add helper RTL822X_VND2_C22_REG (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: Init PHY private structure for mv88q211x (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: enable temperature sensor in mv88q2xxx_config_init (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: order includes alphabetically (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: align defines (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83822: Add support for changing the transmit amplitude voltage (Izabela Bakollari) [RHEL-75590]
  - net: phy: Add helper for getting tx amplitude gain (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove helper phy_is_internal (Izabela Bakollari) [RHEL-75590]
  - net: phy: stop exporting phy_queue_state_machine (Izabela Bakollari) [RHEL-75590]
  - net: phy: stop exporting feature arrays which aren't used outside phylib (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove fixup-related definitions from phy.h which are not used outside phylib (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: switch from paged to MMD ops in rtl822x functions (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: improve mmd register access for internal PHY's (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: Move some macros to phy-lib for later use (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: Add token ring clear bit operation support (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: Add token ring set bit operation support (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: Add token ring access helper functions in mtk-phy-lib (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: Change to more meaningful macros (Izabela Bakollari) [RHEL-75590]
  - net: phy: c45: improve handling of disabled EEE modes in generic ethtool functions (Izabela Bakollari) [RHEL-75590]
  - net: phy: rename eee_broken_modes to eee_disabled_modes (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: Add support for PHY LEDs on 88q2xxx (Izabela Bakollari) [RHEL-75590]
  - net: phy: broadcom: don't include '<linux/pm_wakeup.h>' directly (Izabela Bakollari) [RHEL-75590]
  - net: phylink: add support for notifying PCS about EEE (Izabela Bakollari) [RHEL-75590]
  - net: phylink: provide phylink_mac_implements_lpi() (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83tg720: Add randomized polling intervals for link detection (Izabela Bakollari) [RHEL-75590]
  - net: phy: Add support for driver-specific next update time (Izabela Bakollari) [RHEL-75590]
  - net: phy: aquantia: Use HWMON_CHANNEL_INFO macro to simplify code (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell10g: Use HWMON_CHANNEL_INFO macro to simplify code (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell: Use HWMON_CHANNEL_INFO macro to simplify code (Izabela Bakollari) [RHEL-75590]
  - net: phylink: make configuring clock-stop dependent on MAC support (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83td510: introduce LED framework support (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: use string choices helpers (Izabela Bakollari) [RHEL-75590]
  - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (Izabela Bakollari) [RHEL-75590]
  - net: phylink: fix regression when binding a PHY (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: Fix temperature measurement with reset-gpios (Izabela Bakollari) [RHEL-75590]
  - net: phylink: always do a major config when attaching a SFP PHY (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove leftovers from switch to linkmode bitmaps (Izabela Bakollari) [RHEL-75590]
  - net: phylink: add EEE management (Izabela Bakollari) [RHEL-75590]
  - net: phylink: add phylink_link_is_up() helper (Izabela Bakollari) [RHEL-75590]
  - net: phy: add support for querying PHY clock stop capability (Izabela Bakollari) [RHEL-75590]
  - net: mdio: add definition for clock stop capable bit (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_rds_ptp : Add PEROUT feature library for RDS PTP supported Microchip phys (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1: Enable pin out specific to lan887x phy for PEROUT signal (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_rds_ptp: Header file library changes for PEROUT (Izabela Bakollari) [RHEL-75590]
  - net: phylink: provide fixed state for 1000base-X and 2500base-X (Izabela Bakollari) [RHEL-75590]
  - net: phylink: use neg_mode in phylink_mii_c22_pcs_decode_state() (Izabela Bakollari) [RHEL-75590]
  - net: phylink: pass neg_mode into c22 state decoder (Izabela Bakollari) [RHEL-75590]
  - net: phylink: pass neg_mode into .pcs_get_state() method (Izabela Bakollari) [RHEL-75590]
  - net: phylink: use pcs_neg_mode in phylink_mac_pcs_get_state() (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83822: Fix typo "outout" -> "output" (Izabela Bakollari) [RHEL-75590]
  - net: phy: Constify struct mdio_device_id (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove unused PHY_INIT_TIMEOUT and PHY_FORCE_TIMEOUT (Izabela Bakollari) [RHEL-75590]
  - net: phy: move realtek PHY driver to its own subdirectory (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: always clear NBase-T lpa (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: clear master_slave_state if link is down (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: clear 1000Base-T lpa if link is down (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: add support for reading MDIO_MMD_VEND2 regs on RTL8125/RTL8126 (Izabela Bakollari) [RHEL-75590]
  - net: phy: introduce optional polling interface for PHY statistics (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83tg720: add statistics support (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83td510: add statistics support (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1: depend on PTP_1588_CLOCK_OPTIONAL (Izabela Bakollari) [RHEL-75590]
  - net: phy: add configuration of rx clock stop mode (Izabela Bakollari) [RHEL-75590]
  - net: phy: micrel: use helper phy_disable_eee (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83822: Add support for PHY LEDs on DP83822 (Izabela Bakollari) [RHEL-75590]
  - net: phylink: add support for PCS supported_interfaces bitmap (Izabela Bakollari) [RHEL-75590]
  - net: phy: fix phy_disable_eee (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1 : Add initialization of ptp for lan887x (Izabela Bakollari) [RHEL-75590]
  - net: phy: Makefile: Add makefile support for rds ptp in Microchip phys (Izabela Bakollari) [RHEL-75590]
  - net: phy: Kconfig: Add rds ptp library support and 1588 optional flag in Microchip phys (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_rds_ptp : Add rds ptp library for Microchip phys (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_rds_ptp: Add header file for Microchip rds ptp library (Izabela Bakollari) [RHEL-75590]
  - net: phy: avoid undefined behavior in *_led_polarity_set() (Izabela Bakollari) [RHEL-75590]
  - net: phy: micrel: Dynamically control external clock of KSZ PHY (Izabela Bakollari) [RHEL-75590]
  - net: phy: add phy_disable_eee (Izabela Bakollari) [RHEL-75590]
  - net: phy: ks8995: constify 'struct bin_attribute' (Izabela Bakollari) [RHEL-75590]
  - net: phylink: improve phylink_sfp_config_phy() error message with missing PHY driver (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83822: Add support for GPIO2 clock output (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83822: Replace DP83822_DEVADDR with MDIO_MMD_VEND2 (Izabela Bakollari) [RHEL-75590]
  - net: phy: Add helper for mapping RGMII link speed to clock rate (Izabela Bakollari) [RHEL-75590]
  - net: phy: update phy_ethtool_get_eee() documentation (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove genphy_c45_eee_is_active()'s is_enabled arg (Izabela Bakollari) [RHEL-75590]
  - net: phy: avoid genphy_c45_ethtool_get_eee() setting eee_enabled (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell: use phydev->eee_cfg.eee_enabled (Izabela Bakollari) [RHEL-75590]
  - net: phylink: remove phylink_phy_no_inband() (Izabela Bakollari) [RHEL-75590]
  - net: phylink: add negotiation of in-band capabilities (Izabela Bakollari) [RHEL-75590]
  - net: phylink: add pcs_inband_caps() method (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell: implement config_inband() method (Izabela Bakollari) [RHEL-75590]
  - net: phy: add phy_config_inband() (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell: implement phy_inband_caps() method (Izabela Bakollari) [RHEL-75590]
  - net: phy: bcm84881: implement phy_inband_caps() method (Izabela Bakollari) [RHEL-75590]
  - net: phy: add phy_inband_caps() (Izabela Bakollari) [RHEL-75590]
  - net: phylink: add debug for phylink_major_config() (Izabela Bakollari) [RHEL-75590]
  - net: phylink: split cur_link_an_mode into requested and active (Izabela Bakollari) [RHEL-75590]
  - net: phylink: pass phylink and pcs into phylink_pcs_neg_mode() (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip: Reset LAN88xx PHY to ensure clean link state on LAN7800/7850 (Izabela Bakollari) [RHEL-75590]
  - net: phy: fix phy_ethtool_set_eee() incorrectly enabling LPI (Izabela Bakollari) [RHEL-75590]
  - net: phy: ensure that genphy_c45_an_config_eee_aneg() sees new value of phydev->eee_cfg.eee_enabled (Izabela Bakollari) [RHEL-75590]
  - net: phy: fix phylib's dual eee_enabled (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1: Clause-45 PHY loopback support for LAN887x (Izabela Bakollari) [RHEL-75590]
  - net: phy: c45: don't use temporary linkmode bitmaps in genphy_c45_ethtool_get_eee (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83869: fix status reporting for 1000base-x autonegotiation (Izabela Bakollari) [RHEL-75590]
  - mdio: Remove mdio45_ethtool_gset_npage() (Izabela Bakollari) [RHEL-75590]
  - include: mdio: Remove mdio45_ethtool_gset() (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: add MT7530 & MT7531's PHY ID macros (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: Integrate read/write page helper functions (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: Improve readability of mtk-phy-lib.c's mtk_phy_led_hw_ctrl_set() (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: Move LED helper functions into mtk phy lib (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek: Re-organize MediaTek ethernet phy drivers (Izabela Bakollari) [RHEL-75590]
  - net: phylink: clean up phylink_resolve() (Izabela Bakollari) [RHEL-75590]
  - net: phylink: remove switch() statement in resolve handling (Izabela Bakollari) [RHEL-75590]
  - net: phylink: move MLO_AN_PHY resolve handling to if() statement (Izabela Bakollari) [RHEL-75590]
  - net: phylink: move MLO_AN_FIXED resolve handling to if() statement (Izabela Bakollari) [RHEL-75590]
  - net: phylink: move manual flow control setting (Izabela Bakollari) [RHEL-75590]
  - net: phy: add phy_set_eee_broken (Izabela Bakollari) [RHEL-75590]
  - net: phy: convert eee_broken_modes to a linkmode bitmap (Izabela Bakollari) [RHEL-75590]
  - net: phy: aquantia: Add mdix config and reporting (Izabela Bakollari) [RHEL-75590]
  - net: phy: remove genphy_config_eee_advert (Izabela Bakollari) [RHEL-75590]
  - net: phy: broadcom: use genphy_c45_an_config_eee_aneg in bcm_config_lre_aneg (Izabela Bakollari) [RHEL-75590]
  - net: phy: export genphy_c45_an_config_eee_aneg (Izabela Bakollari) [RHEL-75590]
  - net: phy: make genphy_c45_write_eee_adv() static (Izabela Bakollari) [RHEL-75590]
  - net: broadcom: use ethtool string helpers (Izabela Bakollari) [RHEL-75590]
  - net: phy: respect cached advertising when re-enabling EEE (Izabela Bakollari) [RHEL-75590]
  - net: phy: use ethtool string helpers (Izabela Bakollari) [RHEL-75590]
  - net: phy: dp83822: Configure RMII mode on DP83825 devices (Izabela Bakollari) [RHEL-75590]
  - net: phylink: simplify how SFP PHYs are attached (Izabela Bakollari) [RHEL-75590]
  - net: phylink: validate sfp_select_interface() returned interface (Izabela Bakollari) [RHEL-75590]
  - net: phylink: add common validation for sfp_select_interface() (Izabela Bakollari) [RHEL-75590]
  - net: phylink: simplify phylink_parse_fixedlink() (Izabela Bakollari) [RHEL-75590]
  - gpiolib: add a per-gpio_device line state notification workqueue (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: add RTL8125D-internal PHY (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek-ge-soc: Propagate error code correctly in cal_cycle() (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek-ge-soc: Shrink line wrapping to 80 characters (Izabela Bakollari) [RHEL-75590]
  - net: phy: mediatek-ge-soc: Fix coding style (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell: Add mdix status reporting (Izabela Bakollari) [RHEL-75590]
  - net: phylink: remove "using_mac_select_pcs" (Izabela Bakollari) [RHEL-75590]
  - net: phylink: allow mac_select_pcs() to remove a PCS (Izabela Bakollari) [RHEL-75590]
  - net: phylink: remove use of pl->pcs in phylink_validate_mac_and_pcs() (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: merge the drivers for internal NBase-T PHY's (Izabela Bakollari) [RHEL-75590]
  - net: phy: aquantia: fix return value check in aqr107_config_mdi() (Izabela Bakollari) [RHEL-75590]
  - net: sfp: change quirks for Alcatel Lucent G-010S-P (Izabela Bakollari) [RHEL-75590]
  - net: phylink: allow half-duplex modes with RATE_MATCH_PAUSE (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: clear 1000Base-T link partner advertisement (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: change order of calls in C22 read_status() (Izabela Bakollari) [RHEL-75590]
  - net: phy: realtek: read duplex and gbit master from PHYSR register (Izabela Bakollari) [RHEL-75590]
  - net: phy: intel-xway: add support for PHY LEDs (Izabela Bakollari) [RHEL-75590]
  - net: phy: mxl-gpy: correctly describe LED polarity (Izabela Bakollari) [RHEL-75590]
  - net: phy: aquantia: correctly describe LED polarity override (Izabela Bakollari) [RHEL-75590]
  - net: phy: support 'active-high' property for PHY LEDs (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1s: configure collision detection based on PLCA mode (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1s: add support for Microchip's LAN867X Rev.C2 (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1s: add support for Microchip's LAN867X Rev.C1 (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1s: move LAN867X reset handling to a new function (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1s: add support for Microchip's LAN865X Rev.B1 (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1s: update new initial settings for LAN865X Rev.B0 (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1s: restructure cfg read/write functions arguments (Izabela Bakollari) [RHEL-75590]
  - net: phy: c45-tja11xx: add support for outputting RMII reference clock (Izabela Bakollari) [RHEL-75590]
  - net: phy: aquantia: poll status register (Izabela Bakollari) [RHEL-75590]
  - net: phy: Validate PHY LED OPs presence before registering (Izabela Bakollari) [RHEL-75590]
  - net: phy: smsc: use devm_clk_get_optional_enabled_with_rate() (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1: SQI support for LAN887x (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: Enable auto negotiation for mv88q2110 (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: Make register writer function generic (Izabela Bakollari) [RHEL-75590]
  - net: phy: marvell-88q2xxx: Align soft reset for mv88q2110 and mv88q2220 (Izabela Bakollari) [RHEL-75590]
  - net: phy: aquantia: allow forcing order of MDI pairs (Izabela Bakollari) [RHEL-75590]
  - net: phy: mxl-gpy: add missing support for TRIGGER_NETDEV_LINK_10 (Izabela Bakollari) [RHEL-75590]
  - net: phy: Add support for PHY timing-role configuration via device tree (Izabela Bakollari) [RHEL-75590]
  - net: phy: microchip_t1: Interrupt support for lan887x (Izabela Bakollari) [RHEL-75590]
  - net: phy: mxl-gpy: add basic LED support (Izabela Bakollari) [RHEL-75590]
  - redhat/configs: Disable TPM2 HMAC sessions (Štěpán Horáček) [RHEL-82779]
  - cpuidle: Init cpuidle only for present CPUs (Mark Langsdorf) [RHEL-87864]
  - cpuidle: menu: Update documentation after get_typical_interval() changes (Mark Langsdorf) [RHEL-87864]
  - cpuidle: menu: Update documentation after previous changes (Mark Langsdorf) [RHEL-87864]
  - cpuidle: menu: Avoid discarding useful information (Mark Langsdorf) [RHEL-87864]
  - cpuidle: menu: Eliminate outliers on both ends of the sample set (Mark Langsdorf) [RHEL-87864]
  - cpuidle: menu: Tweak threshold use in get_typical_interval() (Mark Langsdorf) [RHEL-87864]
  - cpuidle: menu: Use one loop for average and variance computations (Mark Langsdorf) [RHEL-87864]
  - cpuidle: menu: Drop a redundant local variable (Mark Langsdorf) [RHEL-87864]
  - cpuidle: psci: Add trace for PSCI domain idle (Mark Langsdorf) [RHEL-87864]
  - cpuidle: teo: Skip sleep length computation for low latency constraints (Mark Langsdorf) [RHEL-87864]
  - cpuidle: teo: Replace time_span_ns with a flag (Mark Langsdorf) [RHEL-87864]
  - cpuidle: teo: Simplify handling of total events count (Mark Langsdorf) [RHEL-87864]
  - cpuidle: teo: Skip getting the sleep length if wakeups are very frequent (Mark Langsdorf) [RHEL-87864]
  - cpuidle: teo: Simplify counting events used for tick management (Mark Langsdorf) [RHEL-87864]
  - cpuidle: teo: Clarify two code comments (Mark Langsdorf) [RHEL-87864]
  - cpuidle: teo: Drop local variable prev_intercept_idx (Mark Langsdorf) [RHEL-87864]
  - cpuidle: teo: Combine candidate state index checks against 0 (Mark Langsdorf) [RHEL-87864]
  - cpuidle: teo: Reorder candidate state index checks (Mark Langsdorf) [RHEL-87864]
  - cpuidle: teo: Rearrange idle state lookup code (Mark Langsdorf) [RHEL-87864]
  - cpuidle: teo: Update documentation after previous changes (Mark Langsdorf) [RHEL-87864]
  - cpuidle: psci: Activate GENPD_FLAG_ACTIVE_WAKEUP with OSI (Mark Langsdorf) [RHEL-87864]
  - cpuidle: Change :enter_dead() driver callback return type to void (Mark Langsdorf) [RHEL-87864]
  - cpuidle: Do not return from cpuidle_play_dead() on callback failures (Mark Langsdorf) [RHEL-87864]
  - powerpc/machdep: Drop include of dma-mapping.h (Mark Langsdorf) [RHEL-87864]
  - cpuidle: Correct some typos in comments (Mark Langsdorf) [RHEL-87864]
  - cpuidle: menu: Remove iowait influence (Mark Langsdorf) [RHEL-87864]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-122.el10]
changelog:
  - drm/vmwgfx: Fix guests running with TDX/SEV (Jocelyn Falempe) [RHEL-101642]
  - crypto: s390/paes - Fix memory leak on CTR final block (Herbert Xu) [RHEL-106158]
  - net: atlantic: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-105363]
  - net: atlantic: Avoid -Wflex-array-member-not-at-end warnings (Izabela Bakollari) [RHEL-105363]
  - net: atlantic: fix warning during hot unplug (Izabela Bakollari) [RHEL-105363]
  - net: atlantic: support reading SFP module info (Izabela Bakollari) [RHEL-105363]
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Li Tian) [RHEL-89855]
  - ACPI: button: Only send `KEY_POWER` for `ACPI_BUTTON_NOTIFY_STATUS` (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Avoid initializing on non-ACPI platforms (Mark Langsdorf) [RHEL-89362]
  - platform/x86: thinkpad_acpi: Fix registration of tpacpi platform driver (Mark Langsdorf) [RHEL-89362]
  - platform/x86: ideapad-laptop: pass a correct pointer to the driver data (Mark Langsdorf) [RHEL-89362]
  - platform/x86/amd: pmf: Fix missing hidden options for Smart PC (Mark Langsdorf) [RHEL-89362]
  - platform/x86/amd: pmf: Add balanced-performance to hidden choices (Mark Langsdorf) [RHEL-89362]
  - platform/x86/amd: pmf: Add 'quiet' to hidden choices (Mark Langsdorf) [RHEL-89362]
  - platform/x86: acer-wmi: Fix initialization of last_non_turbo_profile (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Fix memory leak in profile_class_is_visible() (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Add a prefix to log messages (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Clean platform_profile_handler (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Add support for hidden choices (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Move platform_profile_handler (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Remove platform_profile_handler from exported symbols (Mark Langsdorf) [RHEL-89362]
  - platform/surface: surface_platform_profile: Use devm_platform_profile_register() (Mark Langsdorf) [RHEL-89362]
  - platform/x86: asus-wmi: Use devm_platform_profile_register() (Mark Langsdorf) [RHEL-89362]
  - platform/x86: ideapad-laptop: Use devm_platform_profile_register() (Mark Langsdorf) [RHEL-89362]
  - platform/x86: dell-pc: Use devm_platform_profile_register() (Mark Langsdorf) [RHEL-89362]
  - platform/x86: amd: pmf: sps: Use devm_platform_profile_register() (Mark Langsdorf) [RHEL-89362]
  - platform/x86: acer-wmi: Use devm_platform_profile_register() (Mark Langsdorf) [RHEL-89362]
  - platform/x86: inspur_platform_profile: Use devm_platform_profile_register() (Mark Langsdorf) [RHEL-89362]
  - platform/x86: hp-wmi: Use devm_platform_profile_register() (Mark Langsdorf) [RHEL-89362]
  - platform/x86: thinkpad_acpi: Use devm_platform_profile_register() (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Add `probe` to platform_profile_ops (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Add `ops` member to handlers (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Remove platform_profile_handler from callbacks (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Let drivers set drvdata to the class device (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Replace *class_dev member with class_dev (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Add devm_platform_profile_register() (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Allow multiple handlers (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Notify class device from platform_profile_notify() (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Check all profile handler to calculate next (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Make sure all profile handlers agree on profile (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Add concept of a "custom" profile (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Only show profiles common for all handlers (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Notify change events on register and unregister (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Add profile attribute for class interface (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Add choices attribute for class interface (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Add name attribute to class interface (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Create class for ACPI platform profile (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Use `scoped_cond_guard` (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Use guard(mutex) for register/unregister (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Move matching string for new profile out of mutex (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Move sanity check out of the mutex (Mark Langsdorf) [RHEL-89362]
  - platform/x86: acer-wmi: use an ACPI bitmap to set the platform profile choices (Mark Langsdorf) [RHEL-89362]
  - platform/x86: acer-wmi: simplify platform profile cycling (Mark Langsdorf) [RHEL-89362]
  - platform/x86: acer-wmi: use new helper function for setting overclocks (Mark Langsdorf) [RHEL-89362]
  - platform/x86: acer-wmi: use WMI calls for platform profile handling (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Pass the profile handler into platform_profile_notify() (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Add platform handler argument to platform_profile_remove() (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform_profile: Add device pointer into platform profile handler (Mark Langsdorf) [RHEL-89362]
  - platform/x86/dell: dell-pc: Create platform device (Mark Langsdorf) [RHEL-89362]
  - ACPI: platform-profile: Add a name member to handlers (Mark Langsdorf) [RHEL-89362]
  - platform/x86: asus-wmi: Use platform_profile_cycle() (Mark Langsdorf) [RHEL-89362]
  - platform/x86: asus-wmi: Fix inconsistent use of thermal policies (Mark Langsdorf) [RHEL-89362]
  - platform/x86: acer-wmi: Implement proper hwmon support (Mark Langsdorf) [RHEL-89362]
  - platform/x86: acer-wmi: Improve error handling when reading gaming system information (Mark Langsdorf) [RHEL-89362]
  - platform/x86: acer-wmi: Rename ACER_CAP_FAN_SPEED_READ (Mark Langsdorf) [RHEL-89362]
  - x86/acpi: Replace manual page table initialization with kernel_ident_mapping_init() (Mark Langsdorf) [RHEL-89362]
  - ACPI: button: Install notifier for system events as well (Mark Langsdorf) [RHEL-89362]
  - x86/smp: Fix mwait_play_dead() and acpi_processor_ffh_play_dead() noreturn behavior (Mark Langsdorf) [RHEL-89362]
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl (Mark Langsdorf) [RHEL-89362]
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register (Mark Langsdorf) [RHEL-89362]
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting (Mark Langsdorf) [RHEL-89362]
  - acpi: numa: Add support to enumerate and store extended linear address mode (Mark Langsdorf) [RHEL-89362]
  - ACPI: fan: Add fan speed reporting for fans with only _FST (Mark Langsdorf) [RHEL-89362]
  - ACPI/processor_idle: Export acpi_processor_ffh_play_dead() (Mark Langsdorf) [RHEL-89362]
  - ACPI: HED: Always initialize before evged (Mark Langsdorf) [RHEL-89362]
  - x86/ACPI: CPPC: Add missing include (Mark Langsdorf) [RHEL-89362]
  - ACPI: video: Use str_yes_no() helper in acpi_video_bus_add() (Mark Langsdorf) [RHEL-89362]
  - ACPI: power: Use str_on_off() helper function (Mark Langsdorf) [RHEL-89362]
  - ACPI: thermal: Fix stale comment regarding trip points (Mark Langsdorf) [RHEL-89362]
  - ACPI/processor_idle: Add FFH state handling (Mark Langsdorf) [RHEL-89362]
  - x86/smp: Allow calling mwait_play_dead with an arbitrary hint (Mark Langsdorf) [RHEL-89362]
  - ACPI: GTDT: Relax sanity checking on Platform Timers array count (Mark Langsdorf) [RHEL-82670]
  - ACPI: PRM: Remove unnecessary strict handler address checks (Mark Langsdorf) [RHEL-82670]
  - ACPI: resource: IRQ override for Eluktronics MECH-17 (Mark Langsdorf) [RHEL-82670]
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read() (Mark Langsdorf) [RHEL-82670]
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V (Mark Langsdorf) [RHEL-82670]
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). (Mark Langsdorf) [RHEL-82670]
  - APEI: GHES: Have GHES honor the panic= setting (Mark Langsdorf) [RHEL-82670]
  - mm/early_ioremap: add null pointer checks to prevent NULL-pointer dereference (Mark Langsdorf) [RHEL-82670]
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure (Mark Langsdorf) [RHEL-82670]
  - hwmon: (acpi_power_meter) Fix uninitialized variables (Mark Langsdorf) [RHEL-82670]
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last (Mark Langsdorf) [RHEL-82670]
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Mark Langsdorf) [RHEL-82670]
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82670]
  - ACPI: tables: Use string choice helpers (Mark Langsdorf) [RHEL-82670]
  - ACPI: property: Consider data nodes as being available (Mark Langsdorf) [RHEL-82670]
  - ACPI: bus: implement acpi_device_hid when !ACPI (Mark Langsdorf) [RHEL-82670]
  - ACPI: bus: implement for_each_acpi_consumer_dev when !ACPI (Mark Langsdorf) [RHEL-82670]
  - ACPI: header: implement acpi_device_handle when !ACPI (Mark Langsdorf) [RHEL-82670]
  - ACPI: bus: implement acpi_get_physical_device_location when !ACPI (Mark Langsdorf) [RHEL-82670]
  - ACPI: bus: implement for_each_acpi_dev_match when !ACPI (Mark Langsdorf) [RHEL-82670]
  - x86/cpu: Move MWAIT leaf definition to common header (Mark Langsdorf) [RHEL-82670]
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Mark Langsdorf) [RHEL-82670]
  - ACPI: battery: Rename extensions to hook in messages (Mark Langsdorf) [RHEL-82670]
  - ACPI: OSL: Use usleep_range() in acpi_os_sleep() (Mark Langsdorf) [RHEL-82670]
  - ACPI: BGRT: Mark bin_attribute as __ro_after_init (Mark Langsdorf) [RHEL-82670]
  - ACPI: resource: Fix memory resource type union access (Mark Langsdorf) [RHEL-82670]
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (Mark Langsdorf) [RHEL-82670]
  - ACPI: introduce acpi_arch_init() (Mark Langsdorf) [RHEL-82670]
  - ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (Mark Langsdorf) [RHEL-82670]
  - ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (Mark Langsdorf) [RHEL-82670]
  - ACPI: video: force native for Apple MacbookPro11,2 and Air7,2 (Mark Langsdorf) [RHEL-82670]
  - ACPI: CPPC: Fix _CPC register setting issue (Mark Langsdorf) [RHEL-82670]
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method (Mark Langsdorf) [RHEL-82670]
  - ACPI: Switch back to struct platform_driver::remove() (Mark Langsdorf) [RHEL-82670]
  - ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() (Mark Langsdorf) [RHEL-82670]
  - ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (Mark Langsdorf) [RHEL-82670]
  - acpi/arm64: remove unnecessary cast (Mark Langsdorf) [RHEL-82670]
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Mark Langsdorf) [RHEL-82670]
  - ACPI: allow building without CONFIG_HAS_IOPORT (Mark Langsdorf) [RHEL-82670]
  - ACPI: processor_perflib: extend X86 dependency (Mark Langsdorf) [RHEL-82670]
  - ACPI: scan: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82670]
  - ACPI: SBSHC: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82670]
  - ACPI: SBS: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82670]
  - ACPI: power: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82670]
  - ACPI: pci_root: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82670]
  - ACPI: pci_link: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82670]
  - ACPI: event: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82670]
  - ACPI: EC: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82670]
  - ACPI: APD: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82670]
  - ACPI: thermal: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82670]
  - ACPI: battery: Check for error code from devm_mutex_init() call (Mark Langsdorf) [RHEL-82670]
  - ACPI: GTDT: Tighten the check for the array of platform timer structures (Mark Langsdorf) [RHEL-82670]
  - ACPI: EC: make EC support compile-time conditional (Mark Langsdorf) [RHEL-82670]
  - redhat/configs: enable CONFIG_ACPI_EC (Mark Langsdorf) [RHEL-82670]
  - ACPI: pfr_telemetry: remove redundant error check on ret (Mark Langsdorf) [RHEL-82670]
  - genirq: Unexport nr_irqs (Mark Langsdorf) [RHEL-82670]
  - genirq: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - fs/procfs: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - xen/events: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - serial: ucc_uart: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - serial: cpm_uart: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - serial: amba-pl011: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - serial: amba-pl010: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - serial: 8250: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - serial: core: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - scsi: aha152x: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - net: 3com: 3c59x: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - hpet: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - powerpc/cell: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - x86/acpi: Switch to irq_get_nr_irqs() and irq_set_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - s390/irq: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - genirq: Introduce irq_get_nr_irqs() and irq_set_nr_irqs() (Mark Langsdorf) [RHEL-82670]
  - ACPI: battery: Register power supply with power_supply_register() (Mark Langsdorf) [RHEL-82670]
  - ACPI: battery: use DEFINE_SIMPLE_DEV_PM_OPS (Mark Langsdorf) [RHEL-82670]
  - ACPI: battery: initialize mutexes through devm_ APIs (Mark Langsdorf) [RHEL-82670]
  - ACPI: battery: allocate driver data through devm_ APIs (Mark Langsdorf) [RHEL-82670]
  - ACPI: battery: check result of register_pm_notifier() (Mark Langsdorf) [RHEL-82670]
  - power: supply: core: add wakeup source inhibit by power_supply_config (Mark Langsdorf) [RHEL-82670]
  - net/mlx5: Reset bw_share field when changing a node's parent (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - IB/mlx5: Fix potential deadlock in MR deregistration (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Fix number of lanes to UNKNOWN when using data_rate_oper (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-94894]
  - net/mlx5e: Disable MACsec offload for uplink representor profile (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: E-switch, Fix error handling for enabling roce (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: TC, Continue the attr process even if encap entry is invalid (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Use custom tunnel header for vxlan gbp (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Move ttc allocation after switch case to prevent leaks (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-37888}
  - RDMA/mlx5: Fix compilation warning when USER_ACCESS isn't set (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - treewide: Switch/rename to timer_delete[_sync]() (mlx5) (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: SHAMPO, Make reserved size independent of page size (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Fix calculation of total invalidated pages (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-22086}
  - RDMA/mlx5: Fix page_size variable overflow (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-99327] {CVE-2025-22091}
  - RDMA/mlx5: Drop access_flags from _mlx5_mr_cache_alloc() (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Fix cache entry update on dereg error (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Fix MR cache initialization error flow (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Support optional-counters binding for QPs (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Compile fs.c regardless of INFINIBAND_USER_ACCESS config (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Add optional counters for RDMA_TX/RX_packets/bytes (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Expose RDMA TRANSPORT flow table types to userspace (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Check enabled UCAPs when creating ucontext (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Create UCAP char devices for supported device capabilities (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Reorder capability check last (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Start health poll after enable hca (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: LAG, reload representors on LAG creation failure (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Fix ethtool -N flow-type ip4 to RSS context (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: TC, Don't offload CT commit if it's the last action (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: CT: Filter legacy rules that are unrelated to nic (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Update pfnum retrieval for devlink port attributes (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fw reset, check bridge accessibility at earlier stage (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Lag, use port selection tables when available (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: TX, Utilize WQ fragments edge for multi-packet WQEs (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Always select CONFIG_PAGE_POOL_STATS (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Use right API to free bitmap memory (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Remove NULL check before dev_{put, hold} (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Expose port reset cycle recovery counter via ethtool (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Get counter group size by FW capability (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Access PHY layer counter group as other counter groups (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Ensure each counter group uses its PCAM bit (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, log the unsupported mask in definer (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, use list_move() instead of del/add (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, remove unused code for alias flow tables (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add support for setting parent of nodes (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Preserve rate settings when creating a rate node (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Introduce hierarchy level tracking on scheduling nodes (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Rename devlink rate parent set function for leaf nodes (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add support for dest flow sampler HWS action (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add support for flow meters HWS action (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add API for sharing HWS action by refcount (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add IFC bits for PPCNT recovery counters group (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add RDMA TRANSPORT steering domain support (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Query ADV_RDMA capabilities (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Limit non-privileged commands (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Allow the throttle mechanism to be more dynamic (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add RDMA_CTRL HW capabilities (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Avoid unnecessary use of comma operator (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Properly match IPsec subnet addresses (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Separate address related variables to be in struct (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Lag, Enable Multiport E-Switch offloads on 8 ports LAG (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Enable lanes configuration when auto-negotiation is off (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Refactor link speed handling with mlx5_link_info struct (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Relocate function declarations from port.h to mlx5_core.h (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add trust lockdown error to health syndrome print function (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Expose crr in health buffer (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Log health buffer data on any syndrome (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Avoid report two health errors on same syndrome (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Remove newline at the end of a netlink error message (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Avoid a hundred -Wflex-array-member-not-at-end warnings (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Change POOL_NEXT_SIZE define value and make it global (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add new health syndrome error and crr bit offset (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Symmetric OR-XOR RSS hash control (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Use secs_to_jiffies() instead of msecs_to_jiffies() (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Support RX xfrm state selector's UPSPEC for packet offload (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Add pass flow group for IPSec RX status table (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Add num_reserved_entries param for ipsec_ft_create() (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Skip IPSec RX policy check for crypto offload (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Move IPSec policy check after decryption (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Change the destination of IPSec RX SA miss rule (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Add helper function to update IPSec default destination (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Separate extended link modes request from link modes type selection (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Change eth_proto parameter naming (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Introduce ptys2ethtool_process_link() (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Refactor ptys2ethtool_adver_link() (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Bridge, correct config option description (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add sensor name to temperature event message (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Prefix temperature event bitmap with '0x' for clarity (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Apply rate-limiting to high temperature warning (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: XDP, Enable TX side XDP multi-buffer support (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Expose RSS via devlink rx reporter diagnose (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Add direct TIRs to devlink rx reporter diagnose (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Move RQs diagnose to a dedicated function (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Expose ICM consumption per function (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Rename and move mlx5_esw_query_vport_vhca_id (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: set the tx_queue_len for pfifo_fast (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: reduce rep rxq depth to 256 for ECPF (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: reduce the max log mpwrq sz for ECPF and reps (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Remove unused mlx5e_tc_flow_action struct (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Remove stray semicolon in LAG port selection table creation (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Support FEC settings for 200G per lane link modes (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add support for 200Gbps per lane link modes (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-83170]
  - net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-83170]
  - net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-83170]
  - net/mlx5: Add devcom component for the clock shared by functions (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-83170]
  - net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-83170]
  - net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-83170]
  - net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-83170]
  - net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-83170]
  - net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-83170]
  - net/mlx5: Remove unused mlx5dr_domain_sync (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Bridge, fix the crash caused by LAG state check (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21970}
  - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, Rightsize bwc matcher priority (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: DR, use the right action structs for STEv3 (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: handle errors in mlx5_chains_create_table() (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21975}
  - net/mlx5: Fill out devlink dev info only for PFs (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-93771]
  - net/mlx5: IRQ, Fix null string in debug print (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Restore missing trace event when enabling vport QoS (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Fix vport QoS cleanup on error (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21882}
  - RDMA/mlx5: Fix bind QP error cleanup flow (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Fix AH static rate parsing (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Fix implicit ODP hang on parent deregistration (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21886}
  - RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - IB/mlx5: Set and get correct qp_num for a DCT QP (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Fix the recovery flow of the UMR QP (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21892}
  - net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21717}
  - RDMA/mlx5: Fix implicit ODP use after free (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21714}
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-81281] {CVE-2025-21732}
  - RDMA/mlx5: Fix indirect mkey ODP page count (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Fix link status down event for MPV (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Handle link status event only for LAG device (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Extend ODP statistics with operation count (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fix unintentional sign extension on shift of dest_attr->vport.vhca_id (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: CT: Offload connections with hardware steering rules (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: CT: Make mlx5_ct_fs_smfs_ct_validate_flow_rule reusable (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: CT: Add initial support for Hardware Steering (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, rework the check if matcher size can be increased (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add nic_cap_reg and vhca_icm_ctrl registers (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: SHAMPO: Introduce new SHAMPO specific HCA caps (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Update mlx5_ifc to support FEC for 200G per lane link modes (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, update flow - support through bigger action RTC (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, update flow - remove the use of dual RTCs (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add HWS to steering mode options (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add HWS get capabilities (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, set create match definer to not supported by HWS (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add support for dest vport HWS action (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add HWS fte API functions (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add dest table cache (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, manage flow counters HWS action sharing by refcount (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add HWS modify header API function (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add HWS packet reformat API function (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add HWS actions pool (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add HWS flow group API functions (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add HWS flow table API functions (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add HWS root namespace functions (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Update TX ESN context for IPSec hardware offload (Benjamin Poirier) [RHEL-72227 RHEL-73520 RHEL-85331]
  - net/mlx5: use do_aux_work for PHC overflow checks (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, set timeout on polling for completion (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, support flow sampler destination (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, use the right size when writing arg data (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, handle returned error value in pool alloc (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21800}
  - net/mlx5: HWS, separate SQ that HWS uses from the usual traffic SQs (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, num_of_rules counter on matcher should be atomic (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, reduce memory consumption of a matcher struct (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, remove wrong deletion of the miss table list (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, change error flow on matcher disconnect (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21751}
  - net/mlx5: HWS, add error message on failure to move rules (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, simplify allocations as we support only FDB (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, denote how refcounts are protected (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, remove implementation of unused FW commands (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, remove the use of duplicated structs (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, Add support for RDMA RX steering over IB link layer (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Remove PTM support log message (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: DR, add support for ConnectX-8 steering (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: DR, expand SWS STE callbacks and consolidate common structs (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, do not initialize native API queues (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, no need to expose mlx5hws_send_queues_open/close (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, retry insertion to hash table on EBUSY (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add mlx5_fs_pool API (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, add counter object to flow destination (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: LAG, Support LAG over Multi-Host NICs (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: LAG, Refactor lag logic (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Report rx_discards_phy via rx_dropped (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add device cap abs_native_port_num (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Add ifc support for cross-esw scheduling (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add support for new scheduling elements (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add ConnectX-8 device to ifc (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: ifc: Reorganize mlx5_ifc_flow_table_context_bits (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Always start IPsec sequence number from 1 (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Rely on reqid in IPsec tunnel mode (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21674}
  - net/mlx5: Clear port select structure when fail to create (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21675}
  - net/mlx5: SF, Fix add port error handling (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Fix a lockdep warning as part of the write combining test (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Fix RDMA TX steering prio (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Fix variable not being completed when function returns (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2025-21662}
  - net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Skip restore TC rules for vport rep without loaded flag (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2024-57801}
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: DR, select MSIX vector 0 for completion queue creation (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Enable multiplane mode only when it is supported (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: DR, prevent potential error pointer dereference (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2024-56660}
  - net/mlx5e: Remove workaround to avoid syndrome for internal port (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: SD, Use correct mdev to build channel param (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: E-Switch, Fix switching to switchdev mode in MPV (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: E-Switch, Fix switching to switchdev mode with IB device disabled (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS: Properly set bwc queue locks lock classes (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS: Fix memory leak in mlx5hws_definer_calc_layout (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Move events notifier registration to be after device registration (Benjamin Poirier) [RHEL-72227 RHEL-73520] {CVE-2024-53224}
  - RDMA/mlx5: Add implementation for ufile_hw_cleanup device operation (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Ensure active slave attachment to the bond IB device (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Call dev_put() after the blocking notifier (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Support querying per-plane IB PortCounters (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - RDMA/mlx5: Support OOO RX WQE consumption (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Introduce data placement ordering bits (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: SHAMPO, Rework header allocation loop (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: SHAMPO, Drop info array (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: SHAMPO, Change frag page setup order during allocation (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: SHAMPO, Fix page_index calculation inconsistency (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: SHAMPO, Simplify UMR allocation for headers (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Make vport QoS enablement more flexible for future extensions (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Integrate esw_qos_vport_enable logic into rate operations (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Generalize scheduling element operations (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Refactor scheduling element configuration bitmasks (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Generalize max_rate and min_rate setting for nodes (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Simplify QoS normalization by removing error handling (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: E-switch, refactor eswitch mode change (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - mlx5/core: deduplicate {mlx5_,}eq_update_ci() (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - mlx5/core: relax memory barrier in eq_update_ci() (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - mlx5/core: Schedule EQ comp tasklet only if necessary (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: do not create xdp_redirect for non-uplink rep (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: move XDP_REDIRECT sq to dynamic allocation (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: HWS, renamed the files in accordance with naming convention (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: DR, moved all the SWS code into a separate directory (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Rework esw qos domain init and cleanup (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: DPLL, Add clock quality level op implementation (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - mlx5: simplify EQ interrupt polling logic (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - mlx5: fix typo in "mlx5_cqwq_get_cqe_enahnced_comp" (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Update features on ring size change (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5e: Update features on MTU change (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: unique names for per device caches (Benjamin Poirier) [RHEL-68478 RHEL-72227 RHEL-73520 RHEL-79734 RHEL-92435]
  - net/mlx5: fs, rename modify header struct member action (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: fs, rename packet reformat struct member action (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Only create VEPA flow table when in VEPA mode (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add sync reset drop mode support (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Generalize QoS operations for nodes and vports (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Simplify QoS scheduling element configuration (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Remove vport QoS enabled flag (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Refactor vport QoS to use scheduling node structure (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Refactor vport scheduling element creation function (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Introduce node struct and rename group terminology to node (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Rename vport QoS group reference to parent (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Restrict domain list insertion to root TSAR ancestors (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add parent group support in rate group structure (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Introduce node type to rate group structure (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Refactor QoS group scheduling element creation (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Add support check for TSAR types in QoS scheduling (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: Unify QoS element type checks across NIC and E-Switch (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Refactor locking to a qos domain mutex (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Store rate groups in a qos domain (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Rename rate group 'list' as 'parent_entry' (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Add an explicit 'dev' to vport trace calls (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Store the eswitch in a mlx5_esw_rate_group (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Drop 'esw' param from vport qos functions (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Always create group0 (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Maintain rate group vport members in a list (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Refactor and document bw_share calculation (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Consistently name vport vars as 'vport' (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Rename vport 'tsar' into 'sched_elem'. (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: qos: Flesh out element_attributes in mlx5_ifc.h (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: hw counters: Remove mlx5_fc_create_ex (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: hw counters: Don't maintain a counter count (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: hw counters: Drop unneeded cacheline alignment (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: hw counters: Replace IDR+lists with xarray (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: hw counters: Use kvmalloc for bulk query buffer (Benjamin Poirier) [RHEL-72227 RHEL-73520]
  - net/mlx5: hw counters: Make fc_stats & fc_pool private (Benjamin Poirier) [RHEL-72227 RHEL-73520]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-17
changelog:
  - Support storing of __crc_* symbols in sections other than .rodata.
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-19
changelog:
  - Capture local __crc_* symbols for "Provides: kernel()".
  - Add support for XZ compression for the symvers file.
  - Fix "Provides: kernel()" generation when both __kcrctab and __kcrctab_gpl
    are present.
  - Fix regression for "Provides:" generation in cases when modversions are stored
    in a section that is over 64K in size.
  - Speedup and cleanup changes in find-provides.ksyms and find-requires.ksyms.
  - Fix regex usage in kmod.attr. (Denys Vlasenko)
  - Implement modalias "Provides:" grouping. (Denys Vlasenko)
  - Speedup and cleanup changes in modalias.prov and kmod.attr. (Denys Vlasenko)


author: keycloak-httpd-client-install fails to build with Python 3.12 - 1.1.14
changelog:
  - Resolves: rhbz#2155009 - keycloak-httpd-client-install fails to build with
    Python 3.12: ModuleNotFoundError: No module named 'distutils'


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 7.9.0-7
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook server
    certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Mike FABIAN <mfabian@redhat.com> - 0.0.62-1
changelog:
  - Update to 0.0.62
  - Get translation changes from CLDR
  - Add more translations from CLDR
  - Add Norwegian keyboard layout to keyboards.xml
    (Resolves: https://github.com/mike-fabian/langtable/issues/16)
  - Add Hang script to Southern Aymara


author: Mike FABIAN <mfabian@redhat.com> - 0.0.63-1
changelog:
  - Update to 0.0.63
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Japanese: prefer anthy over kkc
    (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
  - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
    (Resolves: https://github.com/mike-fabian/langtable/issues/18)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.64-1
changelog:
  - Update to 0.0.64
  - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
    (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.65-1
changelog:
  - Update to 0.0.65
  - Add wuu, tok, glk, gbm, ssy
  - Remove aa_ER.UTF-8@saaho
  - Add kv_RU.UTF-8, chr_RU.UTF-8
  - Add EU, EZ
  - Improve README and Makefile (Resolves: https://github.com/mike-
    fabian/langtable/issues/19)
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 2.015-16
changelog:
  - Convert to new fonts packaging guidelines
  - Migrate to SPDX license expression
  - Drop very very old obsoletes for google-lato-fonts
  - Add gating CI tests in Fedora


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Vojtech Trefny <vtrefny@redhat.com> - 3.0.4-1
changelog:
  - tests: Fix "invalid escape sequence '\#'" warning from Python 3.12 (vtrefny)
  - tests: Fail early when recompilation fails in library_test (vtrefny)
  - lvm-dbus: Replace g_critical calls with bd_utils_log_format (vtrefny)
  - Use log function when calling a plugin function that is not loaded (vtrefny)
  - logging: Default to DEBUG log level if compiled with --enable-debug (vtrefny)
  - nvme: Rework memory allocation for device ioctls (tbzatek)
  - packit: Add configuration for downstream builds (vtrefny)
  - fs: correct btrfs set label description (jvanderwaa)
  - fs: Disable progress for ntfsresize (vtrefny)
  - part: Do not open disk read-write for read only operations (vtrefny)
  - ci: Bump actions/checkout from v3 to v4 (vtrefny)
  - plugins: btrfs: use g_autofree where possible for g_free (jvanderwaa)
  - plugins: use g_autofree for free'ing g_char's (jvanderwaa)
  - spec: Move obsoleted devel subpackages to libblockdev-devel (vtrefny)
  - spec: Obsolete vdo plugin packages (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-1
changelog:
  - tests: Skip some checks for btrfs errors with btrfs-progs 6.6.3 (vtrefny)
  - Fix missing progress initialization in bd_crypto_luks_add_key (vtrefny)
  - fs: Report reason for open() and ioctl() failures (tbzatek)
  - utils: Add expected printf string annotation (tbzatek)
  - lvm-dbus: Avoid using already-freed memory (tbzatek)
  - lvm-dbus: Fix leaking error (tbzatek)
  - python: Add a deepcopy function to our structs (vtrefny)
  - tests: Remove unreliable nvme attribute checks (tbzatek)
  - tests: Use BDPluginSpec constructor in LVM DBus plugin tests (vtrefny)
  - tests: Avoid setting up intermediary loop device for the nvme target (tbzatek)
  - tests: Default to /tmp for create_sparse_tempfile() (tbzatek)
  - part: Fix potential double free when getting parttype (vtrefny)
  - Mark NVDIMM plugin as deprecated since 3.1 (vtrefny)
  - tests: Remove some obsolete rules to skip tests (vtrefny)
  - fs: Add support for getting filesystem min size for NTFS and Ext (vtrefny)
  - fs: Fix allowed UUID for generic mkfs with VFAT (vtrefny)
  - fs: Add a generic function to check for fs info availability (vtrefny)
  - fs: Add a function to check label format for F2FS (vtrefny)
  - swap: Add support for checking label and UUID format (vtrefny)
  - ci: Remove the custom version command for Packit (vtrefny)
  - ci: Manually prepare spec file for Packit (vtrefny)
  - overrides: Remove unused 'sys' import (vtrefny)
  - Add BDPluginSpec constructor and use it in plugin_specs_from_names (vtrefny)
  - Sync spec with downstream (vtrefny)
  - ci: Add an action to compile libblockdev with different compilers (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-3
changelog:
  - Fix creating MD RAID arrays without specifying bitmap localtion
    Resolves: RHEL-31379
  - crypto: Fix double free in bd_crypto_luks_remove_key
    Resolves: RHEL-31489
  - tests: Fix running tests without ntfsprogs
    Resolves: RHEL-32875


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Jan Macku <jamacku@redhat.com> - 8.5.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-46218 - cookie mixed case PSL bypass
      CVE-2023-46219 - HSTS long file name clears contents


author: Jan Macku <jamacku@redhat.com> - 8.6.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-0853 - OCSP verification bypass with TLS session reuse
  - drop 001-dist-add-tests-errorcodes.pl-to-the-tarball.patch (replaced by upstream fix)
  - remove accidentally included mk-ca-bundle.1 man page (upstream bug #12843)


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.1-1
changelog:
  - New stable branch version 1.52.1
  - Remove lua, perl, ruby, php and gobject bindings in RHEL
  - Remove gdisk dependency for RHEL
    resolves: RHEL-35998


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.55.11-1
changelog:
  - Rebase to libguestfs 1.55.11
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.55.12-1
changelog:
  - Rebase to libguestfs 1.55.12
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.55.13-2
changelog:
  - Rebase to libguestfs 1.55.12
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.55.8-1
changelog:
  - Rebase to libguestfs 1.55.8
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.0-1.el10.1
changelog:
  - Rebase to libguestfs 1.56.0
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Richard W.M. Jones <rjones@redhat.com> - 10.0-2
changelog:
  - Import package into CentOS Stream 10
  - Remove resolves refs to work around check-gitbz bug (RHELBLD-14966)
  - Add gating tests
  - Set ExclusiveArch/ExcludeArch to the same as for libguestfs


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Paul Wouters <paul.wouters@aiven.io> - 4.15-1
changelog:
  - Update libreswan to 4.15 for CVE-2024-3652
  - Resolves rhbz#2274448 CVE-2024-3652 libreswan: IKEv1 default AH/ESP
    responder can crash and restart
  - Allow "ipsec import" to try importing PKCS#12 non-interactively if there
    is no password


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-753, RHEL-62174


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-58152, RHEL-65187, RHEL-65268, RHEL-66222, RHEL-66223
      RHEL-68066, RHEL-69449


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69840)
  - qemu: tpm: do not update profile name for transient domains (RHEL-69774)
  - qemu: Enable I/O APIC if needed (RHEL-71414)
  - cpu_map: Sort data files in meson.build (RHEL-70129)
  - sync_qemu_models_i386: Update meson.build (RHEL-70129)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70129)
  - cpu_map: Add 486-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70129)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70129)
  - cpu_map: Add n270-v1 CPU model (RHEL-70129)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70129)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70129)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70129)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70129)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70129)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70129)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70129)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-3
changelog:
  - qemu: Enable I/O APIC even more frequently (RHEL-71414)
  - cpu_map: Add avx10* CPU features (RHEL-71897)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-71897)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-71898)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-73088)
  - qemu: Add support for direct and extended tlbflush features (RHEL-73088)
  - conf: refactor hyperv features formatting (RHEL-73088)
  - conf: Adjust hyperv tlbflush formatting (RHEL-73088)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73699)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68065)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-70627)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-70627)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74040)
  - storage_file: de-modularize the local file backend (RHEL-73506)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73506)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75589)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-74492)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-76802)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-76802)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-76802)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-76802)
  - qemuProcessHandleIOError: Rename local variables (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-76802)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-76802)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-76802)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-76802)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-76802)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-76802)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-76802)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-76802)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-78186)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-78186)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-78186)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-78353)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-78353)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-78353)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-1071)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-1071)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-78398)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-78398)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-78398)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-78398)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-78398)
  - conf: change virDomainHostdevInsert() to return void (RHEL-77086)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-77086)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-77086)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-77086)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-77086)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-77086)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-77086)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-77086)
  - qemu: complete vhostuser + passt support (RHEL-77086)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-77086)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-77086)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-77086)
  - utils: Canonicalize paths before comparing them (RHEL-79165)


author: Jiri Denemark <jdenemar@redhat.com> - 11.1.0-1
changelog:
  - Rebased to libvirt-11.1.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7041, RHEL-7042, RHEL-7104, RHEL-7342, RHEL-20294
      RHEL-41264, RHEL-52493, RHEL-58933, RHEL-70656, RHEL-71042
      RHEL-71810, RHEL-72021, RHEL-72052, RHEL-72192, RHEL-72994
      RHEL-79088, RHEL-79460, RHEL-79465, RHEL-79953


author: Jiri Denemark <jdenemar@redhat.com> - 11.2.0-1
changelog:
  - Rebased to libvirt-11.2.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7035, RHEL-24046, RHEL-40077, RHEL-58151, RHEL-68043
      RHEL-71883, RHEL-72994, RHEL-77552, RHEL-80166, RHEL-80533
      RHEL-80688, RHEL-81731, RHEL-81890, RHEL-83148, RHEL-84257
      RHEL-84688
  - cpu_map: Install Ampere-1 ARM CPU models (RHEL-71662)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Joerg Schmidbauer <jschmidb@de.ibm.com> - 1.2.0
changelog:
  - Support for get/set intermediate iv for CBC and XTS
  - Support for internal iv for GCM
  - Exploit KBLOB2PROTK3 ioctl for clear AES and EC keys
  - Fix AES EP11 version 6 key support for generate and import_clear


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Brian C. Lane <bcl@redhat.com> 40.5.1-1
changelog:
  - New lorax documentation - 40.5.1 (bcl@redhat.com)
    Resolves: RHEL-30615
  - Dockerfile.test: Use Fedora 40 for test image (bcl@redhat.com)
  - Change macboot default to false (bcl@redhat.com)
  - Change defaults to Red Hat Enterprise Linux 10 (bcl@redhat.com)
  - runtime-cleanup: wget2-wget has replaced wget (yselkowi@redhat.com)
  - Added example of how to use livemedia-creator in github actions, and still
    build in fedora. (cjshowalter@alaska.edu)
  - Require lorax-templates-rhel when building for ELN, CentOS Stream and RHEL (sgallagh@redhat.com)
  - workflows: Switch to actions/checkout@v4 (bcl@redhat.com)
  - New lorax documentation - 40.5 (bcl@redhat.com)
  - maint: Switch default platform to F40 (bcl@redhat.com)
  - runtime-cleanup: Update to cleanup more (akira@tagoh.org)
  - runtime-install: Update font packages (akira@tagoh.org)
  - mkksiso: Add support for adding an anaconda updates.img (jkonecny@redhat.com)
  - runtime-install: drop kdump-anaconda-addon (awilliam@redhat.com)
  - s390: Escape volid before using it (bcl@redhat.com)
  - aarch64: Escape volid before using it (bcl@redhat.com)
  - runtime-install: drop retired pcmciautils (awilliam@redhat.com)
  - runtime-install: Drop unneeded packages libmlx4, systemd-sysv, and systemd-units (bcl@redhat.com)
  - runtime-install: wget2-wget has replaced wget (awilliam@redhat.com)
  - runtime-cleanup: anaconda's new interface needs stdbuf (kkoukiou@redhat.com)
  - test-in-podman: Fix problem running in github actions (bcl@redhat.com)
  - test: Add pigz to test-packages (bcl@redhat.com)
  - Adjust runtime-postinstall.tmpl for systemd config files move (zbyszek@in.waw.pl)


author: Brian C. Lane <bcl@redhat.com> 40.5.3-1
changelog:
  - tito: Add RHEL tagger with support for rhbz and RHEL (bcl)
    Related: RHEL-31830
  - livemedia-creator: Use /usr/libexec/qemu-kvm on supported arches (bcl)
    Related: RHEL-31830
  - spec: edk2-aarch64 has the UEFI firmware on aarch64 (bcl)
    Related: RHEL-31830
  - Add prefixdevname to Anaconda image (msekleta)
    Related: RHEL-30010
  - spec: exclude the files section for lmc-virt on ppc64le (bcl)
    Resolves: RHEL-31830


author: Brian C. Lane <bcl@redhat.com> 40.5.4-1
changelog:
  - tito: Add tito to container's test-packages (bcl)
    Related: RHEL-31830
  - creator: Fix pylint error in run_creator (bcl)
    Related: RHEL-31830
  - livemedia-creator: Check for BIOS vs. UEFI qemu support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Enable s390x virt support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Make use of virtio devices more generic (bcl)
    Related: RHEL-31830
  - Set requirement on lorax-templates-rhel for prefixdevname change (bcl)
    Related: RHEL-30010


author: Brian C. Lane <bcl@redhat.com> 40.5.5-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-35396
  - docs: Update livemedia-creator documentation for RHEL 10 (bcl)
    Related: RHEL-31853
  - livemedia-creator: The --make-tar option requires tar (bcl)
    Related: RHEL-31853
  - docs: Update example kickstarts for RHEL/CentOS (bcl)
    Resolves: RHEL-31853
  - lorax: Change default rootfs size to 3GiB (bcl)
    Resolves: RHEL-32504


author: Brian C. Lane <bcl@redhat.com> 40.5.6-1
changelog:
  - New lorax documentation - 40.5.6 (bcl)
    Related: RHEL-48606
  - ltmpl: Remove * from docstring (bcl)
    Related: RHEL-48606
  - docs: Update intersphinx and add _static dir (bcl)
    Related: RHEL-48606
  - docs: Document --rootfs-type options (bcl)
    Related: RHEL-48606
  - erofs: Use dedupe and all-fragments options (bcl)
    Related: RHEL-48606
  - imgutils: mkfs.erofs options should come first (bcl)
    Related: RHEL-48606
  - Accept but ignore the old --squashfs-only argument (awilliam)
    Related: RHEL-48606
  - Add compression.erofs section to lorax.conf (bcl)
    Resolves: RHEL-48606
  - Add erofs and erofs-ext4 support to --rootfs-type (bcl)
    Related: RHEL-48606
  - Replace squashfs_only with rootfs_type (bcl)
    Related: RHEL-48606
  - imgutils: Add mkerofs function and test (bcl)
    Related: RHEL-48606
  - runtime-postinstall: Make sure blacklist_exceptions has been removed (jstodola)
    Resolves: RHEL-53721


author: Brian C. Lane <bcl@redhat.com> 40.5.7-1
changelog:
  - templates: Sync template changes from lorax-templates-rhel (bcl)
    Resolves: RHEL-54713
  - tests: Add a test to make sure redhat-release-eula isn't included (bcl)
    Related: RHEL-54381


author: Brian C. Lane <bcl@redhat.com> 40.5.8-1
changelog:
  - tests: Fix mkksiso unit test (bcl)
    Related: RHEL-61778
  - pylint: Print astroid version (bcl)
    Related: RHEL-61778
  - Extend help for --updates and --ks parameters (jkonecny)
    Related: RHEL-61778
  - Fix --updates the updates image wasn't loaded (jkonecny)
    Resolves: RHEL-61778
  - Implement --replace also for S390 (sebastian.stark)
    Related: RHEL-61778
  - mkksiso: option --replace to replace arbitrary text in boot config.  (sebastian.stark)
    Related: RHEL-61778
  - livemedia: Add isomd5sum (bcl)
    Resolves: RHEL-58896


author: Brian C. Lane <bcl@redhat.com> 40.5.9-1
changelog:
  - tests: Swap nomodeset for inst.text in mkksiso test data (bcl)
    Related: RHEL-66603
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: RHEL-66603
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.10-1
changelog:
  - erofs: Change the erofs compression default to zstd (bcl)
    Related: RHEL-48606
  - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl)
    Related: RHEL-66603
  - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl)
    Related: RHEL-66603
  - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.11-1
changelog:
  - erofs: Make smaller lzma erofs images by default (bcl)
    Related: RHEL-48606
  - Revert "erofs: Change the erofs compression default to zstd" (bcl)
    Related: RHEL-48606


author: Brian C. Lane <bcl@redhat.com> 40.5.12-1
changelog:
  - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl)
    Resolves: RHEL-83202
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl)
    Resolves: RHEL-83519


author: Brian C. Lane <bcl@redhat.com> - 10.0-47
changelog:
  - Makefile: Add PREV support for clog (bcl)
    Related: RHEL-40021
  - git-changelog: Change line length limit to 120 (bcl)
    Related: RHEL-40021
  - README: Update README with note about PREV= (bcl)
    Related: RHEL-40021
  - Remove libvisual from runtime-cleanup as it's being removed from RHEL 10 (tpopela)
    Resolves: RHEL-39949
  - tests: Do not use fedora.repo for the test build (bcl)
    Resolves: RHEL-40021
  - Drop libreport from templates (mkolman)
    Resolves: RHEL-39794


author: Brian C. Lane <bcl@redhat.com> - 10.0-49
changelog:
  - SERIAL: Bump to 48 to match spec change for mass rebuild (bcl)
  - firmware: Exclude installation of audio firmware (bcl)
    Related: RHEL-44311
  - tests: Replace $stream with 10-stream (bcl)
    Related: RHEL-44311
  - runtime-install: Only install qcom-firmware on aarch64 (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to brcmfmac-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to intel-audio-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to dvb-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: qcom firmware is now in the qcom-firmware package (bcl)
    Related: RHEL-44311
  - Drop Tiger VNC from templates (mkolman)
    Resolves: RHEL-38741


author: Brian C. Lane <bcl@redhat.com> - 10.0-50
changelog:
  - runtime-cleanup: Fix gshadow typo (bcl)
    Resolves: RHEL-35396
  - runtime-install: Add redhat-release-eula (bcl)
    Related: RHEL-35396
  - kernel: Keep nvram module (bcl)
    Resolves: RHEL-36443
  - kernel: Keep hid-multitouch module (bcl)
    Resolves: RHEL-49546


author: Brian C. Lane <bcl@redhat.com> - 10.0-53
changelog:
  - runtime-cleanup: fonttosfnt no longer installed (bcl)
    Resolves: RHEL-54717
  - Use the same page args in all the per-arch templates (bcl)
    Resolves: RHEL-54535
  - Remove manual /root/lorax-packages.log creation (bcl)
    Resolves: RHEL-54534
  - Remove libuser.conf (bcl)
    Resolves: RHEL-54533


author: Brian C. Lane <bcl@redhat.com> - 10.0-55
changelog:
  - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl)
    Related: RHEL-67586
  - tests: Fix the repos used for the test (bcl)
    Related: RHEL-67586
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-67586


author: Brian C. Lane <bcl@redhat.com> - 10.1-1
changelog:
  - Bump release version to 10.1 (bcl)
    Related: RHEL-91929
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91929


author: Brian C. Lane <bcl@redhat.com> - 10.1-3
changelog:
  - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk)
    Resolves: RHEL-102872
  - runtime-postinstall: allow pipewire to run as root (awilliam)
    Resolves: RHEL-102419
  - runtime-cleanup: Do not clean up rpm binaries (bcl)
    Resolves: RHEL-101695


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: Filip Janus <fjanus@redhat.com> - 3:10.11.6-2
changelog:
  - Apply demodularization
  - the default stream builds mariadb.rpm
  - the non-default stream builds mariadbXX.XX.rpm


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.7-1
changelog:
  - Rebase to 10.11.7
  - Patch 10 removed, the main.ssl_cipher test has been fixed
    and re-enabled by upstream and now passes on all architectures


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57014 - Rebase qemu-ga to 9.1.0
  - RHEL-32297 - guest agent public ssh injection api support for Windows
  - RHEL-36718 - The version of mingw-qemu-ga-win doesn't match inside query and via command 'guest-info'
  - Set version to 109.1.0


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.0.0-1
changelog:
  - RHEL-83547 - Rebase mingw-qemu-ga-win to QEMU 10.0.0 
  - RHEL-96980 - mingw-qga: Drop mingw-pixman build deps
  - RHEL-98947 - [mingw-qemu-ga-win] MSI installer ignore VSS installation result 
  - RHEL-11824 - [QGA] VSS installation retry, if previously VSS service was not un-registered correctly


author: Joe Orton <jorton@redhat.com> - 1.14.2-21
changelog:
  - restore plaintext password storage by default (per upstream)
  - restrict symbols exposed by DSOs built for httpd


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-3
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.2-3
changelog:
  - Rebase to nbdkit 1.42.2
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
    resolves: RHEL-78830
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.2-4
changelog:
  - Rebase to nbdkit 1.42.2
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
    resolves: RHEL-78830
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.2-8
changelog:
  - Rebase to nbdkit 1.42.2
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
    resolves: RHEL-78830
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.5-1
changelog:
  - Rebase to nbdkit 1.42.5
    resolves: RHEL-78830
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.26.0-1
changelog:
  - update to 1.26.0
  - add Sergey Kandaurov's PGP public key
  - add Roman Arutyunyan's PGP public key
  - remove Maxim Dounin's PGP public key
  - enable experimental HTTP/3 module
  - refresh patches
  - update default config http2 directive
  - remove outdated custom error pages, reducing maintenance burden


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.1-3
changelog:
  - Resolves: RHEL-33742 - Disable ENGINE support by default
  - disable ENGINE support by default
  - add engine bcond


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Jerry James <loganjerry@gmail.com> - 9-1
changelog:
  - Update OCaml native arches for OCaml 5.1
  - Remove the Python file and some macros (now in ocaml-rpm-macros)
  - Add %ocaml_pkg macro for common declarations


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
changelog:
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-2.0
changelog:
  - Temporary disabling self-test
    Related: RHEL-42635
  - Change ssh-keygen defaults in FIPS mode
    Resolves: RHEL-37324
  - Use FIPS-compatible API for key derivation RHEL-10
    Resolves: RHEL-43592


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-3
changelog:
  - sshd doesn't propose to enter password again when a non-existing user is specified
    Resolves: RHEL-11981
  - Reenabling self-test on rpm build
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-5
changelog:
  - Restore GSS connectivity when no hostkeys are present
    Related: RHEL-42635
  - Add missing gsskeyex authentication method
    Related: RHEL-42635
  - "publickey-hostbound@openssh.com" extension makes no sense with GSS
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10
changelog:
  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
    Related: RHEL-36659
  - Support key encapsulation/decapsulation in openssl pkeyutl command
    Resolves: RHEL-54156
  - Fix typo in the patch numeration
    Related: RHEL-41261
  - Enable KTLS, temporary disable KTLS tests
    Related: RHEL-47335
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
    Resolves: RHEL-54232
  - Resolve SAST package scan results
    Resolves: RHEL-37561


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16
changelog:
  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80811
    Resolves: RHEL-57022
    Resolves: RHEL-24098
    Resolves: RHEL-24097
    Resolves: RHEL-86865


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-3
changelog:
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-88908
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-88911
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-88913
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-88906
  - Enable sslkeylog support
    Resolves: RHEL-90853
  - Fix UEFI builds
    Resolves: RHEL-89137


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Fix regressions caused by rebase to OpenSSL 3.5
    Related: RHEL-80811
  - Fix UEFI builds on double function definitions
    Resolves: RHEL-93168


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Benedikt Bongartz <bongartz@redhat.com> - 0.95.0
changelog:
  - add observability user that is part of the systemd-journal group
  - add opentelemetry collector config folder (`/etc/opentelemetry-collector/configs`)
  - add opentelemetry collector default config
  - add microshift manifests


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream 
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs: 
  - CVE-2024-45338
  - CVE-2024-45337
    Resolves: RHEL-78346


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-78944


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Fix reversion of previous dependency updates post golang update
    Resolves: RHEL-79109


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify pre-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-76915


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-84025


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Update addresses CVE-2025-29786
    Resolves: RHEL-84153


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-84160


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-9
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85035


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90009


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337
    Resolves: RHEL-78346


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.5.3-2
changelog:
  - We run tests with specially crafted OpenSSL configuration, not the system one
    Resolves: RHEL-25983


author: Lukas Tyrychtr <ltyrycht@redhat.com> - 46.1-2
changelog:
  - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-8
changelog:
  - Make sure redhat-package-notes spec is skipped if _package_note_flags is
    undefined (rbhz#2184553)


author: Sudip Shil <sshil@redhat.com> - 6.0-7
changelog:
  - Convert to new fonts packaging guidelines and SPDX license
  - Update the fonts package
  - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.018-1
changelog:
  - Update to 0.018
    - Fix version requirement for CPAN::Meta::Prereqs
    - Move issue tracker to GitHub


author: Paul Howarth <paul@city-fan.org> - 2.143-1
changelog:
  - Update to 2.143 (rhbz#2216187)
    - Fix regression with implicit minimum value and multiple requirements (GH#38)
  - Don't package perlcritic.rc


author: Paul Howarth <paul@city-fan.org> - 2.142-1
changelog:
  - Update to 2.142
    - confess() replaced with croak(): fewer stack traces
    - Broke the version range handling into the Range class
    - Note: this version now requires perl v5.10 rather than v5.6
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.114-1
changelog:
  - Update to 0.114
    - Data::OptList now requires perl v5.12.0
    - Tests no longer add "-T" to shebang, so do not invoke taint mode


author: Packit <hello@packit.dev> - 6.93-1
changelog:
  - Release: v6.93 (Sullivan Beck)
  - Checkpoint: v6.93 (Sullivan Beck)
  - Remove Travis (Sullivan Beck)
  - Initial checkin of next release cycle: 6.93 (Sullivan Beck)


author: Paul Howarth <paul@city-fan.org> - 1.006000-1
changelog:
  - Update to 1.006000
    - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var
      module
    - Refactored the Perl 5.37.2+ lexical exporter support


author: Paul Howarth <paul@city-fan.org> - 1.006001-1
changelog:
  - Update to 1.006001
    Documentation
    - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual
    Packaging
    - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl


author: Paul Howarth <paul@city-fan.org> - 1.006002-1
changelog:
  - Update to 1.006002
    Documentation
    - Link to Exporter::Almighty in pod
    - Update copyright dates
    Packaging
    - Set homepage in metadata to https://exportertiny.github.io


author: Michal Josef Špaček <mspacek@redhat.com> - 6.01-34
changelog:
  - Package tests
  - Patch for remove warning in test
  - Simplify build and install phases
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 2.205-1
changelog:
  - Update to 2.205
    - Add perl 5.38 to CI matrix
    - Add on workflow_dispatch
    - Add some OO examples


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 4.09-1
changelog:
  - Update to 4.09
    - Updated backportPP with JSON::PP 4.11
    - Fix a test to pass under perl with core bool support


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 2:0.42.34-1
changelog:
  - 0.4234 bump
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Michal Josef Špaček <mspacek@redhat.com> - 6.0.1-42
changelog:
  - Add patch to add tests for other USM scenarios
  - Add patch to rewrite from Digest::SHA1 to Digest::SHA
  - Add patch to rewrite usage of HMAC with same dependencies
  - Add patch to split test files for better readability
  - Improve patch for switch from Socket6 to Socket
  - Package tests
  - Rename patch to better name with source dist version


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Michal Josef Špaček <mspacek@redhat.com> - 2.014-9
changelog:
  - Fix running of tests in perl-Net-Server-tests subpackage
    Resolves: RHEL-65278
  - Sync OpenSSL Engine patch with upstream


author: Paul Howarth <paul@city-fan.org> - 0.104003-1
changelog:
  - Update to 0.104003 (rhbz#2208530)
    - Add Artistic 1.0 Perl license and make Perl license use it
    - Remove extra "59" from LGPL-2.1
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.104004-1
changelog:
  - Update to 0.104004 (rhbz#2209461)
    - Rename Perl Artistic License to avoid confusion in detecting license


author: Paul Howarth <paul@city-fan.org> - 0.991-1
changelog:
  - Update to 0.991
    - Make the requirement for perl v5.12.0 explicit; previously, it was only
      implicit because of prerequisites


author: Paul Howarth <paul@city-fan.org> - 0.929-1
changelog:
  - Update to 0.929 (rhbz#2157199)
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Use %license
  - Fix permissions verbosely
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 3:1.302196-1
changelog:
  - Update to 1.302196
    - Raise error on missing Hub ID, which should never happen (GH#882)
    - Fix handling of VSTRING and LVALUE refs in is_deeply() (GH#918)
    - Merge several documentation fixes (GH#910, GH#911, GH#912)


author: Paul Howarth <paul@city-fan.org> - 3:1.302197-1
changelog:
  - Update to 1.302197
    - Add ability to attach timestamps to trace objects via API or environment
      variable


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2255994)
    - Update docs to recommend YAML::PP
  - Package description updated as per upstream documentation


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 1:1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80610


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.1-5
changelog:
  - Add versioned provide to the default version
  - Obsolete versioned is no more needed since only default stream provides
    postgresql symbol


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Brian C. Lane <bcl@redhat.com> - 3.52-1
changelog:
  - Deprecate %packages --instLangs and --excludeWeakdeps kickstart options (vponcova)
  - Deprecate timezone --isUtc, --ntpservers and --nontp kickstart options (vponcova)
  - Fix the assert_removed check in the unit tests (vponcova)
  - Remove the repo --ignoregroups kickstart option in Fedora 40 (vponcova)
  - Remove the logging --level kickstart option in Fedora 40 (vponcova)
  - Remove the method kickstart command in Fedora 40 (vponcova)
  - Remove the autostep kickstart command in Fedora 40 (vponcova)
  - requirements: Add setuptools (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.52.1-1
changelog:
  - New release: 3.52.1 (bcl)
    Resolves: RHEL-30566
  - docs: Generate RHEL10 docs (bcl)
  - Makefile: Use .z for scratch builds too (bcl)
  - rhel10: autopart on RHEL does not support --type=btrfs (bcl)
  - rhel10: Add test for btrfs command deprecation (bcl)
  - rhel10: Add missing rhsm and syspurpose commands (bcl)
  - Update RHEL 9 handler (bcl)
  - Update RHEL 10 handler classes (bcl)
  - tox.ini: Only test with Python 3.12 to speed things up (bcl)
  - Add RHEL 10 handler (RHEL-30566) (bcl)
  - Use .z version for new builds, start with 3.52.0 (bcl)
  - workflow: Use python 3.12.2 for tests (bcl)
  - workflow: Bump checkout and setup-python actions to new versions (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.52.2-1
changelog:
  - Switch DEFAULT_VERSION to RHEL10 (bcl)
    Resolves: RHEL-30566
  - Add a DEFAULT_VERSION variable to version.py (bcl)
  - Deprecate network team options on RHEL 10 (rvykydal)


author: Brian C. Lane <bcl@redhat.com> - 3.52.3-1
changelog:
  - btrfs: Remove support for the btrfs command on RHEL10 (bcl)
    Resolves: RHEL-34009
  - Deprecate modularity on RHEL 10 (marusak.matej)
    Resolves: RHEL-34829


author: Brian C. Lane <bcl@redhat.com> - 3.52.4-1
changelog:
  - timezone: Remove the --isUtc, --nontp, and --ntpserver arguments (bcl)
    Related: RHEL-34009
  - packages: Remove the old camel case arguments on RHEL10 (bcl)
    Resolves: RHEL-34009
  - nvdimm: Remove support for the nvdimm command on RHEL10 (bcl)
    Related: RHEL-34009


author: Brian C. Lane <bcl@redhat.com> - 3.52.6-1
changelog:
  - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl)
    Related: RHEL-61426
  - workflow: Use python 3.12.7 for testing (bcl)
    Related: RHEL-61426
  - options: adjust to behavior change in upstream _parse_optional (awilliam)
    Resolves: RHEL-61426


author: Brian C. Lane <bcl@redhat.com> - 3.52.7-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61435


author: Brian C. Lane <bcl@redhat.com> - 3.52.8-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61435
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76502


author: Brian C. Lane <bcl@redhat.com> - 3.52.9-1
changelog:
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-80086
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-80086


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-10
changelog:
  - Don't assume %_smp_mflags only ever contains -jX, use -j%_smp_build_ncpus directly
  - Fixes: rhbz#2179149


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Vendula Poncova <vponcova@redhat.com> - 1.7-1
changelog:
  - CI: Use dnf instead of yum to install CentOS packages (vponcova)
  - Documentation: Improve the installation instruction (vponcova)
  - Remove untracked files from the git repository interactively (vponcova)
  - UnixFD: Document the support for Unix file descriptors (vponcova)
  - Documentation: Clean up examples in the documentation (vponcova)
  - Documentation: Simplify the README.md file (vponcova)
  - Documentation: Fix bullet point lists (vponcova)
  - Documentation: Simplify the hostname example (vponcova)
  - CI: Run tests for all supported Python version (vponcova)
  - UnixFD: Handle DBus signals with Unix file descriptors (vponcova)
  - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova)
  - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova)
  - UnixFD: Process results of client calls in the low-level library (vponcova)
  - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova)
  - CI: Always pull the latest container image (vponcova)
  - CI: Disable the unhashable-member warning (vponcova)
  - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova)
  - UnixFD: Move the unit tests to a new file (vponcova)
  - UnixFD: Manage the testing bus on set up and tear down (vponcova)
  - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova)
  - UnixFD: Create a new testing DBus interface (vponcova)
  - UnixFD: Fix the indentation in unit tests (vponcova)
  - Add unit tests for variants with variant types (vponcova)
  - Simplify the code for replacing values of the UnixFD type (vponcova)
  - Add classes for unpacking and unwrapping a variant (vponcova)
  - Don't use pylint from pip on Fedora Rawhide (vponcova)
  - UnixFD: Rename a parameter to server_arguments (vponcova)
  - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova)
  - Raise TimeoutError if a DBus call times out (vponcova)
  - Fix pylint tests in CentOS Stream 8 (vponcova)
  - Fix the ENV instruction in Dockerfiles (vponcova)
  - Fix pylint issues (vponcova)
  - run forked tests using subprocess, instead of multiprocessing (wdouglass)
  - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass)
  - Add test case for method call only returning fd (jlyda)
  - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda)
  - fix some lint discovered errors (wdouglass)
  - seperate unixfd functionality, to better support systems that don't have them (wdouglass)
  - Remove note in documentation about unsupported Unix file descriptors (wdouglass)
  - Add a test for UnixFD transfer (wdouglass)
  - Allow UnixFDs to be replaced and passed into Gio (wdouglass)
  - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo)
  - Extend the .coveragerc file (vponcova)
  - Disable builds for Fedora ELN on commits (vponcova)
  - Test Debian with Travis (vponcova)
  - Test Ubuntu with Travis (vponcova)
  - Test CentOS Stream 9 with Travis (vponcova)
  - Use CentOS Stream 8 for testing (vponcova)
  - add remove dbus object function on bus and update tests (matthewcaswell)
  - properly measure coverage across multiprocess test cases (wdouglass)
  - Move handle typing tests into a new class (and a new file) (wdouglass)
  - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass)
  - Add functions for generating/consuming fdlists with variants (wdouglass)
  - Provide a language argument for the code blocks (seahawk1986)
  - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass)
  - Allow to run tests in a container (vponcova)
  - Add C0209 to the ignore list for pylint (tjoslin)
  - Use the latest distro in Travis CI (vponcova)
  - Always update the container (vponcova)
  - Document limitations of the DBus specification generator (vponcova)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Evan Goode <egoode@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 (RHEL-38831)
  - Added pre-transaction plugin
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
    (RHEL-35577)


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Martin Kolman <mkolman@redhat.com> - 0.51-1
changelog:
  - SPDX compatible License: line (mkolman)
  - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com)
  - Improve formatting and data in setup.py (vslavik)


author: John Eckersberg <jeckersb@redhat.com> - 0.10.1-1
changelog:
  - New upstream release 0.10.1 (rhbz#2256342)
  - Remove patch for Python 3.13 compatibility (merged upstream in 0.10.0)
  - Add new depencency on furo
  - Include missing THANKS file (https://github.com/netaddr/netaddr/pull/345)


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Jindrich Novy <jnovy@redhat.com> - 3:5.0.0-1
changelog:
  - python-podman-5.0.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.0.0
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 3:5.2.0-1
changelog:
  - python-podman-5.2.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.2.0
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 3:5.3.0-1
changelog:
  - python-podman-5.3.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.3.0
  - Resolves: RHEL-69004


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <mhroncok@redhat.com> - 14-3
changelog:
  - Avoid needless pkg_resources import in pythonbundles.py
  - Ignore environment markers in pythonbundles.py


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Jiri Konecny <jkonecny@redhat.com> - 1.9.0-5
changelog:
  - Migrate to SPDX license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#Detailed_Description


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-2
changelog:
  - kvm-file-posix-probe-discard-alignment-on-Linux-block-de.patch [RHEL-87642]
  - kvm-block-io-skip-head-tail-requests-on-EINVAL.patch [RHEL-87642]
  - kvm-file-posix-Fix-crash-on-discard_granularity-0.patch [RHEL-87642]
  - kvm-Enable-vhost-user-gpu-pci-for-RHIVOS.patch [RHEL-86056]
  - Resolves: RHEL-87642
    (QEMU sends unaligned discards on 4K devices[RHEL-10])
  - Resolves: RHEL-86056
    (Enable 'vhost-user-gpu-pci' in qemu-kvm for RHIVOS)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-3
changelog:
  - kvm-migration-postcopy-Spatial-locality-page-hint-for-pr.patch [RHEL-85635]
  - kvm-meson-configure-add-valgrind-option-en-dis-able-valg.patch [RHEL-88457]
  - kvm-distro-add-an-explicit-valgrind-devel-build-dep.patch [RHEL-88457]
  - kvm-Allow-guest-get-load-QGA-command.patch [RHEL-91219]
  - Resolves: RHEL-85635
    (Video stuck about 1 min after switchover phase when play one video during postcopy-preempt migration)
  - Resolves: RHEL-88457
    (qemu inadvertantly built with valgrind coroutine stack debugging on x86_64)
  - Resolves: RHEL-91219
    ([qemu-guest-agent] Enable 'guest-get-load' by default [RHEL-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-4
changelog:
  - kvm-block-Expand-block-status-mode-from-bool-to-flags.patch [RHEL-88435 RHEL-88437]
  - kvm-file-posix-gluster-Handle-zero-block-status-hint-bet.patch [RHEL-88435 RHEL-88437]
  - kvm-block-Let-bdrv_co_is_zero_fast-consolidate-adjacent-.patch [RHEL-88435 RHEL-88437]
  - kvm-block-Add-new-bdrv_co_is_all_zeroes-function.patch [RHEL-88435 RHEL-88437]
  - kvm-iotests-Improve-iotest-194-to-mirror-data.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Minor-refactoring.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Pass-full-sync-mode-rather-than-bool-to-inter.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Allow-QMP-override-to-declare-target-already-.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Drop-redundant-zero_target-parameter.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Skip-pre-zeroing-destination-if-it-is-already.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Skip-writing-zeroes-when-target-is-already-ze.patch [RHEL-88435 RHEL-88437]
  - kvm-iotests-common.rc-add-disk_usage-function.patch [RHEL-88435 RHEL-88437]
  - kvm-tests-Add-iotest-mirror-sparse-for-recent-patches.patch [RHEL-88435 RHEL-88437]
  - kvm-mirror-Reduce-I-O-when-destination-is-detect-zeroes-.patch [RHEL-88435 RHEL-88437]
  - Resolves: RHEL-88435
    (--migrate-disks-detect-zeroes doesn't take effect for disk migration [rhel-10.1])
  - Resolves: RHEL-88437
    (Disk size of target raw image is full allocated when doing mirror with default discard value [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-5
changelog:
  - kvm-file-posix-Define-DM_MPATH_PROBE_PATHS.patch [RHEL-65852]
  - kvm-file-posix-Probe-paths-and-retry-SG_IO-on-potential-.patch [RHEL-65852]
  - kvm-io-Fix-partial-struct-copy-in-qio_dns_resolver_looku.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-setting-client-sockopts-i.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-success-and-failure-paths.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Add-support-for-keep-alive-flag-to.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Refactor-inet_parse-to-use-QemuOpt.patch [RHEL-67706]
  - kvm-util-qemu-sockets-Introduce-inet-socket-options-cont.patch [RHEL-67706]
  - kvm-tests-unit-test-util-sockets-fix-mem-leak-on-error-o.patch [RHEL-67706]
  - Resolves: RHEL-65852
    (Support multipath failover with scsi-block)
  - Resolves: RHEL-67706
    (postcopy on the destination host can't switch into pause status under the network issue if boot VM with '-S')


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-6
changelog:
  - kvm-scsi-disk-Add-native-FUA-write-support.patch [RHEL-71962]
  - kvm-Fix-handling-of-have_block_rbd.patch [RHEL-96057]
  - kvm-Delete-obsolete-references-to-architectures.patch [RHEL-96057]
  - kvm-Fix-arch-list-for-vgabios-and-ipxe-roms.patch [RHEL-96057]
  - kvm-Disable-virtio-net-pci-romfile-loading-on-riscv64.patch [RHEL-96057]
  - Resolves: RHEL-71962
    ([RFE] Implement FUA support in scsi-disk)
  - Resolves: RHEL-96057
    (qemu-kvm: Various small issues in the spec file)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-7
changelog:
  - kvm-s390x-Fix-leak-in-machine_set_loadparm.patch [RHEL-98555]
  - kvm-hw-s390x-ccw-device-Fix-memory-leak-in-loadparm-sett.patch [RHEL-98555]
  - kvm-target-i386-Update-EPYC-CPU-model-for-Cache-property.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Rome-CPU-model-for-Cache-pro.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Milan-CPU-model-for-Cache-pr.patch [RHEL-52650]
  - kvm-target-i386-Add-couple-of-feature-bits-in-CPUID_Fn80.patch [RHEL-52650]
  - kvm-target-i386-Update-EPYC-Genoa-for-Cache-property-per.patch [RHEL-52650]
  - kvm-target-i386-Add-support-for-EPYC-Turin-model.patch [RHEL-52650]
  - kvm-include-qemu-compiler-add-QEMU_UNINITIALIZED-attribu.patch [RHEL-95479]
  - kvm-hw-virtio-virtio-avoid-cost-of-ftrivial-auto-var-ini.patch [RHEL-95479]
  - kvm-block-skip-automatic-zero-init-of-large-array-in-ioq.patch [RHEL-95479]
  - kvm-chardev-char-fd-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-chardev-char-pty-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-chardev-char-socket-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-audio-ac97-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-cs4231a-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-audio-es1370-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-audio-gus-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-audio-marvell_88w8618-skip-automatic-zero-init-of.patch [RHEL-95479]
  - kvm-hw-audio-sb16-skip-automatic-zero-init-of-large-arra.patch [RHEL-95479]
  - kvm-hw-audio-via-ac97-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-char-sclpconsole-lm-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-dma-xlnx_csu_dma-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-display-vmware_vga-skip-automatic-zero-init-of-la.patch [RHEL-95479]
  - kvm-hw-hyperv-syndbg-skip-automatic-zero-init-of-large-a.patch [RHEL-95479]
  - kvm-hw-misc-aspeed_hace-skip-automatic-zero-init-of-larg.patch [RHEL-95479]
  - kvm-hw-net-rtl8139-skip-automatic-zero-init-of-large-arr.patch [RHEL-95479]
  - kvm-hw-net-tulip-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-net-virtio-net-skip-automatic-zero-init-of-large-.patch [RHEL-95479]
  - kvm-hw-net-xgamc-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-nvme-ctrl-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-ppc-pnv_occ-skip-automatic-zero-init-of-large-str.patch [RHEL-95479]
  - kvm-hw-ppc-spapr_tpm_proxy-skip-automatic-zero-init-of-l.patch [RHEL-95479]
  - kvm-hw-usb-hcd-ohci-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-scsi-lsi53c895a-skip-automatic-zero-init-of-large.patch [RHEL-95479]
  - kvm-hw-scsi-megasas-skip-automatic-zero-init-of-large-ar.patch [RHEL-95479]
  - kvm-hw-ufs-lu-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-socket-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-net-stream-skip-automatic-zero-init-of-large-array.patch [RHEL-95479]
  - kvm-hw-i386-amd_iommu-Isolate-AMDVI-PCI-from-amd-iommu-d.patch [RHEL-85649]
  - kvm-hw-i386-amd_iommu-Allow-migration-when-explicitly-cr.patch [RHEL-85649]
  - kvm-Enable-amd-iommu-device.patch [RHEL-85649]
  - kvm-ui-vnc-Update-display-update-interval-when-VM-state-.patch [RHEL-83883]
  - Resolves: RHEL-98555
    ([s390x][RHEL10.1][ccw-device] there would be memory leak with virtio_blk disks)
  - Resolves: RHEL-52650
    ([AMDSERVER 10.1 Feature] Turin: Qemu EPYC-Turin Model)
  - Resolves: RHEL-95479
    (-ftrivial-auto-var-init=zero reduced performance)
  - Resolves: RHEL-85649
    ([RHEL 10]Qemu/amd-iommu: Add ability to manually specify the AMDVI-PCI device)
  - Resolves: RHEL-83883
    (Video stuck after switchover phase when play one video during migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-8
changelog:
  - kvm-migration-multifd-move-macros-to-multifd-header.patch [RHEL-59697]
  - kvm-migration-refactor-channel-discovery-mechanism.patch [RHEL-59697]
  - kvm-migration-Add-save_postcopy_prepare-savevm-handler.patch [RHEL-59697]
  - kvm-migration-ram-Implement-save_postcopy_prepare.patch [RHEL-59697]
  - kvm-tests-qtest-migration-consolidate-set-capabilities.patch [RHEL-59697]
  - kvm-migration-write-zero-pages-when-postcopy-enabled.patch [RHEL-59697]
  - kvm-migration-enable-multifd-and-postcopy-together.patch [RHEL-59697]
  - kvm-migration-Add-qtest-for-migration-over-RDMA.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Enforce-RLIMIT_MEMLOCK-128MB-re.patch [RHEL-59697]
  - kvm-qtest-migration-rdma-Add-test-for-rdma-migration-wit.patch [RHEL-59697]
  - kvm-tests-qtest-migration-add-postcopy-tests-with-multif.patch [RHEL-59697]
  - kvm-file-posix-Fix-aio-threads-performance-regression-af.patch [RHEL-96854]
  - kvm-block-remove-outdated-comments-about-AioContext-lock.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_reopen_.patch [RHEL-88561]
  - kvm-block-snapshot-move-drain-outside-of-read-locked-bdr.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-read-locked-bdrv_inactiv.patch [RHEL-88561]
  - kvm-block-mark-bdrv_parent_change_aio_context-GRAPH_RDLO.patch [RHEL-88561]
  - kvm-block-mark-change_aio_ctx-callback-and-instances-as-.patch [RHEL-88561]
  - kvm-block-mark-bdrv_child_change_aio_context-GRAPH_RDLOC.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_change_aio_context-.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_try_change_aio_cont.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child_common.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_set_backing_hd_drai.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_attach_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_add_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-bdrv_root_unref_child.patch [RHEL-88561]
  - kvm-block-move-drain-outside-of-quorum_del_child.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-internal_snapshot_a.patch [RHEL-88561]
  - kvm-blockdev-drain-while-unlocked-in-external_snapshot_a.patch [RHEL-88561]
  - kvm-block-mark-bdrv_drained_begin-and-friends-as-GRAPH_U.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-remove-image-file-aft.patch [RHEL-88561]
  - kvm-iotests-graph-changes-while-io-add-test-case-with-re.patch [RHEL-88561]
  - Resolves: RHEL-59697
    (Allow multifd+postcopy features being enabled together, but only use multifd during precopy )
  - Resolves: RHEL-96854
    (Performance Degradation(aio=threads) between Upstream Commit b75c5f9 and 984a32f)
  - Resolves: RHEL-88561
    (qemu graph deadlock during job-dismiss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-9
changelog:
  - kvm-Declare-rtl8139-as-deprecated.patch [RHEL-45624]
  - Resolves: RHEL-45624
    (Deprecate rtl8139 NIC in QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-10
changelog:
  - kvm-Enable-uefi-variable-service-for-edk2.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-11
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-105440]
  - Resolves: RHEL-105440
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-12
changelog:
  - kvm-RHEL-Pack-uefi-vars-module.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-14
changelog:
  - kvm-net-Fix-announce_self.patch [RHEL-73894]
  - kvm-vhost-Add-stubs-for-the-migration-state-transfer-int.patch [RHEL-78370]
  - kvm-virtio-net-vhost-user-Implement-internal-migration.patch [RHEL-78370]
  - Resolves: RHEL-73894
    (No RARP packets on the destination after migration [rhel-10])
  - Resolves: RHEL-78370
    (Add vhost-user internal migration for passt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-15
changelog:
  - kvm-migration-Add-helper-to-get-target-runstate.patch [RHEL-54670]
  - kvm-qmp-cont-Only-activate-disks-if-migration-completed.patch [RHEL-54670]
  - kvm-migration-block-Make-late-block-active-the-default.patch [RHEL-54670]
  - kvm-migration-block-Apply-late-block-active-behavior-to-.patch [RHEL-54670]
  - kvm-migration-block-Fix-possible-race-with-block_inactiv.patch [RHEL-54670]
  - kvm-migration-block-Rewrite-disk-activation.patch [RHEL-54670]
  - kvm-block-Add-active-field-to-BlockDeviceInfo.patch [RHEL-54670]
  - kvm-block-Allow-inactivating-already-inactive-nodes.patch [RHEL-54670]
  - kvm-block-Inactivate-external-snapshot-overlays-when-nec.patch [RHEL-54670]
  - kvm-migration-block-active-Remove-global-active-flag.patch [RHEL-54670]
  - kvm-block-Don-t-attach-inactive-child-to-active-node.patch [RHEL-54670]
  - kvm-block-Fix-crash-on-block_resize-on-inactive-node.patch [RHEL-54670]
  - kvm-block-Add-option-to-create-inactive-nodes.patch [RHEL-54670]
  - kvm-block-Add-blockdev-set-active-QMP-command.patch [RHEL-54670]
  - kvm-block-Support-inactive-nodes-in-blk_insert_bs.patch [RHEL-54670]
  - kvm-block-export-Don-t-ignore-image-activation-error-in-.patch [RHEL-54670]
  - kvm-block-Drain-nodes-before-inactivating-them.patch [RHEL-54670]
  - kvm-block-export-Add-option-to-allow-export-of-inactive-.patch [RHEL-54670]
  - kvm-nbd-server-Support-inactive-nodes.patch [RHEL-54670]
  - kvm-iotests-Add-filter_qtest.patch [RHEL-54670]
  - kvm-iotests-Add-qsd-migrate-case.patch [RHEL-54670]
  - kvm-iotests-Add-NBD-based-tests-for-inactive-nodes.patch [RHEL-54670]
  - Resolves: RHEL-54670
    (Provide QMP command for block device reactivation after migration [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-16
changelog:
  - kvm-migration-Fix-UAF-for-incoming-migration-on-Migratio.patch [RHEL-69776]
  - kvm-scripts-improve-error-from-qemu-trace-stap-on-missin.patch [RHEL-83535]
  - kvm-Recommend-systemtap-client-from-qemu-tools.patch [RHEL-83535]
  - Resolves: RHEL-69776
    ([rhel10]Guest crashed on the target host when the migration was canceled)
  - Resolves: RHEL-83535
    ([Qemu RHEL-10] qemu-trace-stap should handle lack of stap more gracefully)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-17
changelog:
  - kvm-Also-recommend-systemtap-devel-from-qemu-tools.patch [RHEL-83535]
  - Resolves: RHEL-83535
    ([Qemu RHEL-10] qemu-trace-stap should handle lack of stap more gracefully)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-8
changelog:
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!) chronologically
    from the latest:
    - Resolve libs for executable links in COPY_AS_IS, PR 3073
    - Skip invalid disk drives when saving layout PR 3047
    - Do not delete NetBackup logs in case of errors and save
      /usr/openv/netbackup/logs to the restored system after a successful recovery
    - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen
      with NetBackup 10.2.0.1
    - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-10
changelog:
  - skip btrfs subvolumes when detecting ESP partitions
  - fix booting on UEFI systems with multiple CDROM devices
  - fix copying of console kernel cmdline parameters
  - Use git to apply patches in %prep
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!):
    - Backport PR 3250 to fix useless warning that libsystemd-core requires
      additional libraries and ReaR recovery system needs additional libraries
    - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs://
      BACKUP/OUTPUT_URL
  - fix backup of btrfs subvolumes


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-11
changelog:
  - Generate /etc/rear/os.conf during build again, it is better than generating it
    in %post, but do not mark it as config file to allow it to be updated during
    package upgrade and avoid containing an old OS version information


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-3
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Tomas Popela <tpopela@redhat,com> - 0.1-4
changelog:
  - Migrate to the new flatpak preinstall config format
  - Add collection id to rhel registry config file and reference it from
    preinstall config files
  - Use org.mozilla.Firefox (and not firefox) which is in RHEL


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 284-1
changelog:
  - Use --config=xxx for clang configs instead of two separate arguments to work
    around a bug in meson
  - Add clang link config file


author: Michal Domonkos <mdomonko@redhat.com> - 290-1
changelog:
  - Use upstream versions of find-provides/requires (RHEL-39760)
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-84703)


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Gael Chamoulaud <gchamoul@redhat.com> 0.1.8-4
changelog:
  - Use thread.join(timeout) to avoid busy waiting and simplify interval event posting logic (rhbz#2115848)


author: Rich Megginson <rmeggins@redhat.com> - 1.95.4-0.1
changelog:
  - Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
  - fixes an issue with parameter name
  - fixes an issue with changed reporting true when nothing has changed


author: Rich Megginson <rmeggins@redhat.com> - 1.95.5-0.1
changelog:
  - Resolves: RHEL-67411 : aide - New role aide to manage system integrity checking
  - fixes issue with certificate tests_basic_ipa.yml


author: Rich Megginson <rmeggins@redhat.com> - 1.95.7-0.1
changelog:
  - Resolves: RHEL-82525 : rhc - rhc: does not enable content in EL10 systems [rhel-10]
  - plus an upgrade to rhc role to fix a testing issue
  - Resolves: RHEL-82526 : storage - "Make sure required packages are installed' task fails because Blivet requires the kmod-kvdo package, which is no longer available on RHEL-10 [rhel-10]


author: Rich Megginson <rmeggins@redhat.com> - 1.99.1-0.1
changelog:
  - Resolves: RHEL-89890 : docs links should not use rhel-system-roles.github
  - Resolves: RHEL-88312 : ad_integration - Introduced option to skip package installation
  - Resolves: RHEL-84953 : firewall - Add `includes` when defining a custom service [rhel-10]
  - Resolves: RHEL-88249 : ha_cluster - fix: restart qdevice when its certificates have been regenerated
  - Resolves: RHEL-81918 : ha_cluster - ha_cluster: 404 on removing qnetd certificate on rhel9.4 client vm
  - Resolves: RHEL-46224 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export pcsd and OS configuration
  - Resolves: RHEL-78262 : metrics : support for gathering spark metrics
  - Resolves: RHEL-88286 : network - Incorrect attribute checks for routing rule validation [rhel-10]
  - Resolves: RHEL-88277 : network - Network role should remove MAC address matching from SysUtil.link_info_find() [rhel-10]
  - Resolves: RHEL-88263 : network - Network role should refine MAC validation using interface name [rhel-10]
  - Resolves: RHEL-85704 : podman - fix: render boolean option values correctly in toml files [rhel-10]
  - Resolves: RHEL-84942 : podman - bug in toml rendering of `podman_containers_conf` [rhel-10]
  - Resolves: RHEL-84932 : podman - podman_registries_conf TOML tables not supported [rhel-10]
  - Resolves: RHEL-84922 : podman - Directory .config/containers mode constantly changed [rhel-10]
  - Resolves: RHEL-84912 : podman - fix: Do not restart logind unless absolutely necessary [rhel-10]
  - Resolves: RHEL-89118 : storage - LVM grow_to_fill feature doesn't work with latest blivet
  - Resolves: RHEL-90216 : storage - Resize logical volumes is not proper idempotent [rhel-10]
  - Resolves: RHEL-88774 : systemd - fix: files and templates in nested directories are not placed correctly [rhel-10]
  - Resolves: RHEL-88760 : systemd - Systemd unmask should run at the begin to allow the role to manage the units [rhel-10]
  - Resolves: RHEL-88297 : timesync - fix: add default seccomp filters for el9/10
  - Resolves: RHEL-85689 : timesync - rhel-system-roles.timesync doesn't work when IPv6 is disabled in environment [rhel-10]


author: Rich Megginson <rmeggins@redhat.com> - 1.101.1-0.1
changelog:
  - Resolves: RHEL-93294 : selinux - fix: Set the kernel command line selinux parameter correctly when changing selinux state


author: Rich Megginson <rmeggins@redhat.com> - 1.105.0-0.1
changelog:
  - Resolves: RHEL-99087 : ad_integration - feat: control sssd domain/realm section name to use; merge settings into chosen name
  - Resolves: RHEL-101676 : bootloader - fix: Fix removing kernel options with values
  - Resolves: RHEL-101671 : bootloader - Add functionality to set default kernel with bootloader [rhel-10]
  - Resolves: RHEL-100819 : ha_cluster - Fix missing /var/lib/pcsd directory after pcs installation
  - Resolves: RHEL-95846 : journald - feat: Add support for SystemKeepFree journald.conf option
  - Resolves: RHEL-95883 : storage - fix: Fix getting PVs from raid_disks for RAID LVs
  - several roles work with ansible 2.19
  - several roles work with bootc
  - network test fix


author: Rich Megginson <rmeggins@redhat.com> - 1.106.0-0.1
changelog:
  - Resolves: RHEL-46225 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export resources configuration
  - Resolves: RHEL-102635 : journald - feat: Add MaxRetention configuration
  - All roles support ansible 2.19
  - All roles support the latest ansible-lint


author: Rich Megginson <rmeggins@redhat.com> - 1.106.1-0.1
changelog:
  - Resolves: RHEL-103887 : postfix - fix: configure postfix to listen only to IPv4 if IPv6 is disabled
  - Resolves: RHEL-103573 : selinux - fix: tempdir path not defined in check mode; __selinux_item.path may be undefined
  - ha_cluster - ansible 2.19 support
  - bootloader - fix wording in README


author: Rich Megginson <rmeggins@redhat.com> - 1.107.0-0.1
changelog:
  - Resolves: RHEL-105093 : podman - specifying multiple users causes resources to be associated with wrong user
  - Resolves: RHEL-95757 : storage - Improve error reporting when invalid or unsupported RAID configuration is given
  - Resolves: RHEL-95729 : storage - [RHEL10] Incorrect key file in crypttab entry for volume encrypted_vol
  - refactor ha_cluster to have empty __init__.py in module_utils for ansible-test
  - fix tests in postfix, selinux


author: Rich Megginson <rmeggins@redhat.com> - 1.108.1-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - Resolves: RHEL-95719 : storage - Tests verification fails on encrypted LVM on top of MD RAID
  - Resolves: RHEL-106261 : sudo - redhat.rhel_system_roles.sudo takes 6-7 hours to scan /etc/sudoers.d
  - fix storage role tests related to encrypted LVM on top of MD RAID and el7 raid errors
  - fix postfix role tests related to rebooting
  - fix ha_cluster role tests related to missing fence agent
  - add firewall test debugging for interface tests


author: Rich Megginson <rmeggins@redhat.com> - 1.108.3-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - add bootloader test for this fix


author: Rich Megginson <rmeggins@redhat.com> - 1.108.4-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - no actual code changes, test fixes for bootloader, ha_cluster, kdump, tlog


author: Rich Megginson <rmeggins@redhat.com> - 1.108.5-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - This fixes tests in certificate, ha_cluster, kdump, selinux


author: Rich Megginson <rmeggins@redhat.com> - 1.108.6-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - This fixes ha_cluster tests


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-3
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-54012)
  - Fix potential use of uninitialized pgp struct (RHEL-54013)
  - Fix memory leak in rpmsign(8) (RHEL-37564)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Jan Černý <jcerny@redhat.com> - 0.1.68-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.68 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.68


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.69 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.69


author: Matthew Burket <mburket@redhat.com> - 0.1.70-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.70 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.70


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.71-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.71 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.71


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.72-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.72 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.72


author: Matthew Burket <mburket@redhat.com>
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.74 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.27-1
changelog:
  - Allow afterburn to mount and read config drives
  Resolves: RHEL-82120
  - Update afterburn file transition policy
  Resolves: RHEL-82120
  - Label /run/metadata with afterburn_runtime_t
  Resolves: RHEL-82120
  - Allow afterburn list ssh home directory
  Resolves: RHEL-82120
  - Confine tuned-ppd
  Resolves: RHEL-69450
  - Update ktls policy
  Resolves: RHEL-74424
  - Add the switcheroo module
  Resolves: RHEL-83267
  - Update switcheroo policy
  Resolves: RHEL-83267
  - Confine the switcheroo-control service
  Resolves: RHEL-83267


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.28-1
changelog:
  - Change path of tuned and tuned-ppd to /usr/sbin
  Resolves: RHEL-69450
  - Update the pcmsensor policy
  Resolves: RHEL-80452
  - Allow dovecot-deliver read mail aliases
  Resolves: RHEL-80153
  - Allow boothd connect to systemd-machined over a unix socket
  Resolves: RHEL-75471
  - Allow chronyd-restricted sendto to chronyc
  Resolves: RHEL-82299
  - Allow chronyc sendto to chronyd-restricted
  Resolves: RHEL-82299
  - Allow cifs.idmap helper to set attributes on kernel keys
  Resolves: RHEL-83921
  - Remove ktls from modules-filtered.lst
  Resolves: RHEL-74424


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.29-1
changelog:
  - Revert "Dontaudit access of virt-related permissive domains"
  Resolves: RHEL-79833
  - Remove permissive domains
  Resolves: RHEL-82672


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.30-1
changelog:
  - Allow auditctl signal auditd
  Resolves: RHEL-87418
  - Update bootupd policy for the removing-state-file test
  Resolves: RHEL-87372
  - Allow systemd-user-runtime-dir get/set tmpfs quotas
  Resolves: RHEL-86789
  - Allow systemd-user-runtime-dir delete gnome homedir content
  Resolves: RHEL-86789
  - Confine /usr/lib/systemd/systemd-user-runtime-dir
  Resolves: RHEL-86789
  - Allow system-dbusd list systemd-machined directories
  Resolves: RHEL-86528
  - Allow NetworkManager create and use icmp_socket
  Resolves: RHEL-86258
  - Allow tuned-ppd dbus chat with xdm
  Resolves: RHEL-85849
  - Allow virt_domain write to virt_image_t files
  Resolves: RHEL-85319
  - Allow rhsmcertd connect to systemd-machined
  Resolves: RHEL-83925
  - Allow varnishd execute the prlimit64() syscall
  Resolves: RHEL-77779
  - Allow systemd-machined the kill user-namespace capability
  Resolves: RHEL-77087
  - Allow system_dbusd_t r/w unix stream sockets of unconfined_service_t
  Resolves: RHEL-62185
  - Allow tlshd read network sysctls
  Resolves: RHEL-74424


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.31-1
changelog:
  - Label /dev/diag as diagnostic_device_t
  Resolves: RHEL-89804
  - Label SetroubleshootPrivileged.py with setroubleshootd_exec_t
  Resolves: RHEL-87727
  - Allow syslogd watch syslog_conf_t directories
  Resolves: RHEL-87648
  - Allow networkmanager send a general signal to iptables
  Resolves: RHEL-86780
  - Define file equivalency for /var/etc
  Resolves: RHEL-86678
  - Update bootupd policy when ESP is not mounted
  Resolves: RHEL-86588
  - dontaudit execmem for modemmanager
  Resolves: RHEL-86176
  - Allow systemd create journal pid files
  Resolves: RHEL-72692
  - Allow virtqemud read/write/setattr input event devices
  Resolves: RHEL-46385


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.32-1
changelog:
  - Backport policy for additional systemd generators from rawhide
  Resolves: RHEL-36740
  - Allow login_userdomain create /run/tlog directory with user_tmp_t
  Resolves: RHEL-56344
  - Backport bootupd policy from current Fedora rawhide
  Resolves: RHEL-86588


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.33-1
changelog:
  - Allow systemd_generator read files in /proc and /sys
  Resolves: RHEL-36740
  - Update irqbalance policy for using unconfined scripts
  Resolves: RHEL-54019
  - Allow utempter use terminal multiplexor
  Resolves: RHEL-56344
  - Allow virtqemud execute ovs-vsctl with a domain transition
  Resolves: RHEL-65322
  - Allow mptcpd the net_admin capability
  Resolves: RHEL-70730
  - Allow tomcat execute cracklib-check with a domain transition
  Resolves: RHEL-82090
  - Update the files_search_mnt() interface
  Resolves: RHEL-85178
  - Allow key.dns_resolve set attributes on the kernel key ring
  Resolves: RHEL-91602
  - Allow switcheroo-control dbus chat with xdm
  Resolves: RHEL-93535
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.34-1
changelog:
  - Allow systemd-coredump the sys_admin capability
  Resolves: RHEL-97586
  - Dontaudit systemd-coredump the sys_resource capability
  Resolves: RHEL-97586
  - Allow systemd-coredumpd sys_admin and sys_resource capabilities
  Resolves: RHEL-97586
  - Allow systemd-coredump read nsfs files
  Resolves: RHEL-97586
  - Dontaudit systemd-coredump sys_admin capability
  Resolves: RHEL-97586
  - Allow svirt-tcg read init state
  Resolves: RHEL-95725
  - Allow virtqemud create and unlink files in /etc/libvirt/
  Resolves: RHEL-95725
  - Allow virtqemud send a generic signal to passt
  Resolves: RHEL-44994
  - Allow openvswitch ioctl vduse devices
  Resolves: RHEL-93041
  - Label /dev/vduse/control and /dev/vduse/NAME devices
  Resolves: RHEL-93041
  - Allow virtstoraged the sys_rawio capability
  Resolves: RHEL-44639
  - Allow virtstoraged fsetid capability
  Resolves: RHEL-44639
  - Allow virtqemud additional permissions on scsi generic chr files
  Resolves: RHEL-44628
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-54019
  - Fix files_dontaudit_delete_all_files()
  Resolves: RHEL-86789
  - Allow virtnodedev create mdevctl config dirs
  Resolves: RHEL-98559
  - Allow cryptsetup-generator manage systemd unit files
  Resolves: RHEL-98656


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.35-1
changelog:
  - Remove duplicate summary header
  Related: RHEL-87742
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-54019
  - virt: allow QEMU use of the qgs daemon for attestation
  Resolves: RHEL-87742
  - qgs: add contrib module for TDX "qgs" daemon
  Resolves: RHEL-87742
  - kernel: add interfaces for using SGX enclaves
  Resolves: RHEL-87742


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.3-1
changelog:
  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-104069
  - Allow virtqemud handle virt_content_t chr files
  Resolves: RHEL-76104
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-77047
  - All sblim-sfcbd the dac_read_search capability
  Resolves: RHEL-98287
  - Allow sblim domain read systemd session files
  Resolves: RHEL-98287
  - Allow sblim-sfcbd execute dnsdomainname
  Resolves: RHEL-98287
  - Allow systemd-importd create and unlink init pid socket
  Resolves: RHEL-98490


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.4-1
changelog:
  - Allow systemd-coredump the sys_chroot capability
  Resolves: RHEL-97586
  - Add the rhcd_rw_fifo_files() interface
  Related: RHEL-99318
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-99318


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.5-1
changelog:
  - Confine nfs-server generator
  Resolves: RHEL-106119
  - Support virtqemud handle hotplug hostdev devices
  Resolves: RHEL-65266
  - Allow virtstoraged create qemu /var/run files
  Resolves: RHEL-104344
  - Allow virtqemud write to sysfs files
  Resolves: RHEL-104378
  - Allow unconfined_domain_type cap2_userns capabilities
  Resolves: RHEL-93656


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.6-1
changelog:
  - Apply generator template to selinux-autorelabel generator
  Resolves: RHEL-107516
  - Allow systemd-coredumpd capabilities in the user namespace
  Resolves: RHEL-97586
  - Allow virtqemud start a vm which uses nbdkit
  Resolves: RHEL-69118
  - Add nbdkit_signal() and nbdkit_signull() interfaces
  Resolves: RHEL-69118
  - Allow openvswitch read virtqemud process state
  Resolves: RHEL-65322
  - Add binsbin-convert.sh script
  Resolves: RHEL-69118


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - new upstream release
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-4
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-57603)
  - tree-wide: Fix python formatting (RHEL-57603)
  - ci: fix Packit (RHEL-57603)
  - ci: drop testing farm test (RHEL-57603)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-73780)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-73780)
  - shared/bus-util: move bus_message_read_id128() to bus-message-util (RHEL-73780)
  - shared/bus-util: move bus_message_hash_ops to bus-message-util (RHEL-73780)
  - shared/bus-util: move string set append/get funcs to bus-message-util and bus-get-properties, respectively (RHEL-73780)
  - shared/serialize: make input params const (RHEL-73780)
  - shared/serialize: introduce serialize_id128() (RHEL-73780)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-73780)
  - core/manager: use FOREACH_ARRAY at one more place (RHEL-73780)
  - core/manager: drop duplicate bus track deserialization (RHEL-73780)
  - bus-util: introduce bus_get_instance_id() (RHEL-73780)
  - core: serialize API bus id and validate before deserializing bus tracks (RHEL-73780)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-73780)
  - shared/bus-util: add missing `set.h` include (RHEL-73780)
  - udevadm-test: add missing oom check (RHEL-75774)
  - udev-rules: replace 'type *func()' -> 'type* func()' (RHEL-75774)
  - udev-rules: do not change maximum log level when running in test mode (RHEL-75774)
  - udevadm-test: introduce -v/--verbose option to show verbose log messages (RHEL-75774)
  - udev-rules: show original token string in log_event_error() and friends (RHEL-75774)
  - udev-rules: logs result of format substitution (RHEL-75774)
  - udev-rules: add more trace logs for string match (RHEL-75774)
  - udev-rules: introduce udev_replace_chars_and_log() (RHEL-75774)
  - udev-rules: ignore whole command result if it is too long and does not contain newline (RHEL-75774)
  - udev-rules: update log messages (RHEL-75774)
  - udev-rules: add trace logs for GOTO and parent conditions (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-8
changelog:
  - Rebase to new upstream stable release v257.3 (RHEL-71409)
  - udev: introduce several features to make debugging rules easier (RHEL-75774)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-10
changelog:
  - resolved: pick up new DNSSEC KSC from 2024 (RHEL-77718)
  - test_ukify: Skip on riscv64 (RHEL-85854)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-15
changelog:
  - ci: rename beta branch to match dist-git name (RHEL-57603)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59871)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-56144)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-56144)
  - confidential-virt: add detection for s390x target (RHEL-56144)
  - man/systemd-detect-virt: fix row spanning for VM header (RHEL-56144)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-56144)


author: Jan Macku <jamacku@redhat.com> - 257-1
changelog:
  - Rebase to new upstream release v257 (RHEL-71409)
  - netif-naming-scheme: introduce rhel-10.0 scheme (RHEL-44417)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-2
changelog:
  - Resolves: RHEL-50166 - Rebase tomcat to version 9.0.87
  - Resolves: RHEL-12274 - Use src.zip file as a Source0 instead of tar.gz
  - Resolves: RHEL-51277 - Prune changelog to remove non-relevant history
  - Resolves: RHEL-52906 - tomcat: Switch to using Java 21 as the default JDK
  - Resolves: RHEL-55194 - Fix changelog version
  - Resolves: RHEL-46156
    tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-1
changelog:
  - Rebase tomcat to 10.1.36
  - Resolves: RHEL-82925
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)
  - Resolves: RHEL-87272
    tomcat: DoS in examples web application (CVE-2024-54677)
  - Resolves: RHEL-87273
    tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316)
  - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-2
changelog:
  - Initial commit on c10s
    Resolves: RHEL-69841
  - tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-5
changelog:
  - Resolves: RHEL-82927
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-5.el10_0.1
changelog:
  - Resolves: RHEL-91750
    tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)
  - Resolves: RHEL-94960
    tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-7
changelog:
  - Resolves: RHEL-108485
    tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108493
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108501
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108509
    tomcat: Denial of service (CVE-2025-52434)
  - Resolves: RHEL-108522
    tomcat: Denial of service (CVE-2025-52520)
  - Resolves: RHEL-108517
    tomcat: Denial of service (CVE-2025-53506)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-7
changelog:
  - Unbreak Podman's downstream Fedora CI
  - Update the BuildRequires on golang to reflect reality
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-8
changelog:
  - Unbreak Podman's downstream Fedora CI (part 2)
  - Backport some new upstream tests
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17121
    - print all arguments of failing commands in error messages
      resolves: RHEL-3689
    - plugin_sysctl: added support for sysctl names with slash
      resolves: RHEL-3707
    - tuned-adm: added support for moving devices between plugin instances
      resolves: RHEL-15141
    - api: added methods for retrieval of plugin instances and devices
      resolves: RHEL-15137
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
      resolves: RHEL-16469
    - hotplug: do not report ENOENT errors on device remove
      resolves: RHEL-11342
    - plugin_sysctl: expand variables when reporting overrides
      resolves: RHEL-18972
    - plugin_acpi: new plugin which handles ACPI platform_profile
      resolves: RHEL-16966
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
      resolves: RHEL-20767
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
      resolves: RHEL-21129
    - scheduler: add option for ignoring IRQs affinity
      resolves: RHEL-21923
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-70454
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94809
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
    - functions: make calc_isolated_cores return CPU ranges
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: disable appropriate P-State drivers
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    - gui: fix the profile deleter script


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2023d-2
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <pats@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84740)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Vit Mojzis <vmojzis@redhat.com> - 0.2.7-5
changelog:
  - Show diff when checking formatting
  - Fix several lint findings
  - Fix generating policy for Crio mounts


author: Jens Petersen <petersen@redhat.com> - 15.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode15.0.0/ (#2126234)
  - http://blog.unicode.org/2022/09/announcing-unicode-standard-version-150.html


author: Jens Petersen <petersen@redhat.com> - 15.1.0-0.1
changelog:
  - update to draft 15.1.0: https://unicode.org/versions/Unicode15.1.0/
  - do not add copyright.html file from website
  - add missing Unicode-TOU license tag


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-1
changelog:
  - Upstream 3.23.0 final
  - configure --enable-lto
  - Remove all upstreamed patches
  - Add BuildRequires: python3-devel for running testsuite.
  - Update license tags to spdx


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.3.0-2
changelog:
  - Switched from bcond to bcond_with for compatibility with el8 and el9
  - haproxy builddep on systems with haproxy2
  - Disable pcre2-jit only for fedora <= 37 on 32bit x86


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Luboš Uhliarik <luhliari@redhat.com> - 7.6.0-3
changelog:
  - Resolves: RHEL-59267 - varnish rebase to 7.6.0
  - Resolves: RHEL-30333 CVE-2024-30156 varnish: HTTP/2 Broken Window
    Attack may result in denial of service


author: Hedayat Vatankhah <hedayat.fwd@gmail.com> - 33.003-1
changelog:
  - Update to latest upstream version: 33.003, and increase the priority of
    vazirmatn font so that it'll be used in Qt apps in fa locale too


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-7
changelog:
  - cloner: Sync <uuid> and <sysinfo> system uuid (RHEL-34608)
  - virtinstall: fix regression with --boot and no install method (RHEL-34608)
  - progress: Fix showing correct final total (RHEL-34608)
  - virtinstall: Fix the allocating disk size printed by the progress bar (RHEL-34608)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (RHEL-34608)
  - virt-install: Recommend '--boot uefi' (RHEL-34608)
  - virt-install: Document Secure Boot setups (RHEL-34608)
  - tests: Add more cloud-init and TPM test cases (RHEL-34608)
  - installer: drop default TPM for --cloud-init install phase (RHEL-34608)
  - Add gating for centos stream 10 (RHEL-34608)
  - xmleditor: make gtksourceview optional (RHEL-35859)


author: Pavel Hrdina <phrdina@redhat.com> - 5.0.0-1
changelog:
  - Rebased to virt-manager-5.0.0 (RHEL-46783)
  - The rebase also fixes the following bugs:
      RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371
      RHEL-65189, RHEL-66768


author: William Poteat <wpoteat@redhat.com> 1.31.25-1
changelog:
  - 2099925: Drop support for RHEVM on RHEL 9 (jhnidek@redhat.com)
  - Update virt-who-config.5 (s10w.1ife.31@gmail.com)
  - Big optimization and refactoring of Nutanix code (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.31.26-1
changelog:
  - Fix stylish issue in migrateconfiguration.py (jhnidek@redhat.com)
  - Added next rhel-9.x subversion to releasers.conf file. (jhnidek@redhat.com)
  - 2158710: Migrated virt-who.conf, when necessary (jhnidek@redhat.com)
  - Added documentation for the 'rhsm_insecure' option, for insecure connections
    (fernandez.santos.d@gmail.com)
  - Added configuration for rhel-9.x into releasers.conf (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.31.27-1
changelog:
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Change /var/run -> /run (orion@nwra.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Drop unused copy of python-daemon sources (ptoscano@redhat.com)
  - Migrate to SPDX license (jhnidek@redhat.com)
  - fix: disable complex tests for ESX (jhnidek@redhat.com)
  - fix: use ssl.SSLContext.wrap_socket for wrapping socket (jhnidek@redhat.com)
  - fix: stylish issue discovered by flake8 (jhnidek@redhat.com)
  - fix: Use ConfigParser and not SafeConfigParser (jhnidek@redhat.com)
  - spec: drop unused openssl dependency (ptoscano@redhat.com)
  - spec: hardcode/inline Python 3 variables (ptoscano@redhat.com)
  - spec: drop unused Group tag (ptoscano@redhat.com)
  - spec: do not Require setuptools (ptoscano@redhat.com)
  - spec: drop $RPM_BUILD_ROOT manual cleanup (ptoscano@redhat.com)
  - Updated README.md file to reflect current state (jhnidek@redhat.com)
  - Drop outdated/unused requirements (ptoscano@redhat.com)
  - Removed support for Jenkins (jhnidek@redhat.com)
  - Added support for GitHub actions (jhnidek@redhat.com)
  - Removed some unused parts of Makefile (jhnidek@redhat.com)
  - Removed support for docker (jhnidek@redhat.com)
  - spec: assume the python3-libvirt package name everywhere
    (ptoscano@redhat.com)
  - spec: drop redundant "release_number" variable (ptoscano@redhat.com)
  - spec: drop outdated variables and comments (ptoscano@redhat.com)
  - spec: drop six dependency (ptoscano@redhat.com)
  - Drop non-systemd support (ptoscano@redhat.com)
  - Feature: improve log message, when wrong value is provided
    (jhnidek@redhat.com)
  - Fix: default value for prism_central cannot be None (jhnidek@redhat.com)
  - spec: drop support for Python < 3 (ptoscano@redhat.com)
  - spec: drop support for Fedora < 36 (ptoscano@redhat.com)
  - spec: drop support for RHEL < 8 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.32.1-1
changelog:
  - feat: Run Github CI action py.test every month (jhnidek@redhat.com)
  - fix: Added missing .el10 to virt-who.spec (jhnidek@redhat.com)
  - fix: Replace all warn() with warning() (jhnidek@redhat.com)


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-97010]
  - Resolves: RHEL-97010
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Neal Gompa <ngompa@centosproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races
    Resolves: RHEL-79119
  - Fix minor spec formatting inconsistencies


author: Rafael Guterres Jeffman <rjeffman@redhat.com> - 1.1.3-15
changelog:
  - Use "grep -E" instead of the obsoleted "egrep"
    Resolves: BZ#2140197
  - mark LICENSE as %license
  - Spec cleanup
  - Small patches, as a rule, are in git dist, to be more easy to read.
  - Migrated to SPDX license (noop)


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.4-1
changelog:
  - xwayland 23.2.4 - (#2254280)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-1
changelog:
  - Update to 0.0.4
  - Require xorg-x11-xauth and dbus-daemon
  - Use mutter as default compositor if none is specified


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-2
changelog:
  - Backport fix for waitpid errors (RHEL-46355)
  - Suggest mutter since this is the default compositor


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


