# changelog

author: Jan Stancek <jstancek@redhat.com> [5.14.0-590.el9]
changelog:
  - cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87940] {CVE-2025-21963}
  - perf test: Update event_groups test to use instructions (Michael Petlan) [RHEL-80165]
  - xfrm: Support ESN context update to hardware for TX (CKI Backport Bot) [RHEL-86504]
  - redhat: Add packing_test to mod-internal.list (Petr Oros) [RHEL-92666]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-92666]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (Petr Oros) [RHEL-92666]
  - lib: packing: document recently added APIs (Petr Oros) [RHEL-92666]
  - lib: packing: add pack_fields() and unpack_fields() (Petr Oros) [RHEL-92666]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (Petr Oros) [RHEL-92666]
  - lib: packing: create __pack() and __unpack() variants without error checking (Petr Oros) [RHEL-92666]
  - lib: packing: use GENMASK() for box_mask (Petr Oros) [RHEL-92666]
  - lib: packing: use BITS_PER_BYTE instead of 8 (Petr Oros) [RHEL-92666]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (Petr Oros) [RHEL-92666]
  - lib: packing: add additional KUnit tests (Petr Oros) [RHEL-92666]
  - lib: packing: add KUnit tests adapted from selftests (Petr Oros) [RHEL-92666]
  - lib: packing: duplicate pack() and unpack() implementations (Petr Oros) [RHEL-92666]
  - lib: packing: add pack() and unpack() wrappers over packing() (Petr Oros) [RHEL-92666]
  - lib: packing: remove kernel-doc from header file (Petr Oros) [RHEL-92666]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (Petr Oros) [RHEL-92666]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (Petr Oros) [RHEL-92666]
  - lib: packing: remove MODULE_LICENSE in non-modules (Petr Oros) [RHEL-92666]
  - Documentation: core-api: packing: correct spelling (Petr Oros) [RHEL-92666]
  - lib: packing: replace bit_reverse() with bitrev8() (Petr Oros) [RHEL-92666]
  - Revert "SUNRPC: Revert e0a912e8ddba" (Benjamin Coddington) [RHEL-92060]
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Use devres for remove as well (Jaroslav Kysela) [RHEL-80682]
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Jaroslav Kysela) [RHEL-80682]
  - tools headers: Update the linux/unaligned.h copy with the kernel sources (Jaroslav Kysela) [RHEL-80682]
  - soundwire: take in count the bandwidth of a prepared stream (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() (Jaroslav Kysela) [RHEL-80682] {CVE-2025-39930}
  - ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: separate DJM-A9 cap lvl options (Jaroslav Kysela) [RHEL-80682]
  - PCI: pci_ids: add INTEL_HDA_PTL_H (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: convert to SYSTEM_SLEEP_PM_OPS (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt722-sdca: add missing readable registers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: Fix maximum ADC Volume (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ops: Consistently treat platform_max as control value (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt1320: set wake_capable = 0 explicitly (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: update ALC222 depop optimize (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: Add jack delay debounce after suspend (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wsa884x: report temps to hwmon in millidegree of Celsius (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usx2y: validate nrpacks module parameter on probe (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Avoid module auto-load handling at event delivery (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Remove (revert) duplicate Ally X config (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l56: Prevent races when soft-resetting using SPI control (Jaroslav Kysela) [RHEL-80682]
  - firmware: cs_dsp: Remove async regmap writes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: warn both sdw and pch dmic are used (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: don't check number of sdw links when set dmic_fixup (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl: Rename stream name of SAI DAI driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: es8328: fix route from DAC to output (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2764: Set the SDOUT polarity correctly (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2764: Fix power control mask (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Drop UMP events when no UMP-conversion is set (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2770: Fix volume scale (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/cirrus: Reduce codec resume time (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/cirrus: Correct the full scale volume set logic (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: imx-audmix: remove cpu_mclk which is from cpu dai device (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fixup ALC225 depop procedure (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l41: Fix acpi_device_hid() not found (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Add branch prediction hint in ACP IRQ handler (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Drop unused includes from Vangogh driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Add post_fw_run_delay ACP quirk (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: revise typo of rt713_vb_l2_rt1320_l13 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: revise typo of rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: hda-intel: add Panther Lake-H support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: pci-ptl: Add support for PTL-H (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: intel-dsp-config: Add PTL-H support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: drop a redundant code (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (Jaroslav Kysela) [RHEL-80682] {CVE-2025-21870}
  - ASoC: cs35l41: Fallback to using HID for system_name if no SUB is available (Jaroslav Kysela) [RHEL-80682]
  - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays. (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Limit mic boost on Positivo ARN50 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils.c: add missing dlc->of_node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB] (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-tgl-match: declare adr as ull (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add support for Fatcat board with BT offload enabled in PTL platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix headset detection failure due to unstable sort (Jaroslav Kysela) [RHEL-80682]
  - ALSA: pcm: use new array-copying-wrapper (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codec: es8316: "DAC Soft Ramp Rate" is just a 2 bit control (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: acp: Fix possible deadlock (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix quirk matching for Legion Pro 7 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: renesas: SND_SIU_MIGOR should depend on DMADEVICES (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Jaroslav Kysela) [RHEL-80682]
  - ASoC: da7213: Initialize the mutex (Jaroslav Kysela) [RHEL-80682]
  - ASoC: use to_platform_device() instead of container_of() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: acp: Support microphone from Lenovo Go S (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8m: Add entry for new 8M Plus revision (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8: Add entries for new 8QM and 8QXP revisions (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx: Add mach entry to select cs42888 topology (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: select CONFIG_DMA_SHARED_BUFFER (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8m: add SAI2,5,6,7 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix return code from poll ops (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix incorrect resp->opcode retrieval (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix meter_levels type to __le32 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: ES8326: Improved PSRR (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: return error value in asrc_m2m_device_run() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: only handle pairs for m2m in the suspend (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix hwdep read ops types (Jaroslav Kysela) [RHEL-80682]
  - ALSA: scarlett2: Add device_setup option to use FCP driver (Jaroslav Kysela) [RHEL-80682]
  - ALSA: FCP: Add Focusrite Control Protocol driver (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Support for Ideapad hotkey mute LEDs (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dapm: add support for preparing streams (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-dai: add snd_soc_dai_prepare() and use it internally (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Add delay quirk for USB Audio Device (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Transfer firmware in two chunks (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Make tied_device=0 as default / unknown (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-dapm: remove !card check from snd_soc_dapm_set_bias_level() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: fsl,micfil: Add compatible string for i.MX943 platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Add i.MX943 platform support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: Use ARRAY_SIZE() to calculate PEB2466_TLV_SIZE (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: Use str_yes_no() to improve bdw_dump() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: return 0 if np was NULL on snd_soc_daifmt_parse_clock_provider_raw() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: audio-graph-card: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: nau8824: fix max volume for Speaker output (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: fsl,mqs: Add compatible string for i.MX943 platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_mqs: Add i.MX943 platform support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: line6: convert timeouts to secs_to_jiffies() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Notify UMP EP and FB changes (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Allow system notification in atomic (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Update rawmidi name per EP name update (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Copy safe string name to rawmidi (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Copy FB name string more safely (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Bump protocol version to 2.0.5 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Show substream activity in info ioctl (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Expose the tied device number in info ioctl (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card: Drop unnecessary "dai-tdm-slot-width-map" property presence check (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sb: Use str_enabled_disabled() helper in info_read() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: emu10k1: Use str_yes_no() helper (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Use of_property_present() for non-boolean properties (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: Add ACPI dependency to fix build error (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rme9652: Simplify with str_yes_no() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Simplify with str_yes_no() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Add missing includes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Adjust IPC traces (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Adjust DSP status register names (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Update ASRC definition (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Improve logging of firmware loading (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Clearly state assumptions of hw_params() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Add MODULE_FIRMWARE to inform about FW (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Print IPC error messages in lower layer (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Update hda component teardown sequences (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix init-config parsing (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix theoretical infinite loop (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix the minimum firmware version numbers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Do not readq() u32 registers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-card: remove card check (Jaroslav Kysela) [RHEL-80682]
  - ALSA: firewire: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - regmap: sdw-mbq: Add support for SDCA deferred controls (Jaroslav Kysela) [RHEL-80682]
  - regmap: sdw-mbq: Add support for further MBQ register sizes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Update list of entity_0 controls (Jaroslav Kysela) [RHEL-80682]
  - soundwire: SDCA: Add additional SDCA address macros (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Simplify with str_enable_disable() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: oss: Simplify with str_enabled_disabled() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: emu10k1: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hdspm: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sonicvibes: Simplify with str_off_on() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: trident: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt5682: Support the ALC5682I-VE codec (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ens137x: Use str_on_off() helper in snd_ensoniq_proc_read() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: madera: Use str_enabled_disabled() helper function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: Use str_yes_no() helper in atom_dump() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: Add aw88083 amplifier driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: Add schema for "awinic,aw88083" (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple_card: Show if link is unidirectional (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple_card: Improve debugging messages (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Make dependency on UMP clearer (Jaroslav Kysela) [RHEL-80682]
  - ALSA: Align the syntax of iov_iter helpers with standard ones (Jaroslav Kysela) [RHEL-80682]
  - ALSA: AC97: Use str_on_off() helper in snd_ac97_proc_read_main() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add a comment for alc_fixup_inv_dmic() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Split function type patching and function naming (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add missing function type names (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add bounds check for function address (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Clean up error messages (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add missing header includes (Jaroslav Kysela) [RHEL-80682]
  - soundwire: amd: clear wake enable register for power off mode (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: count the bandwidth of active streams only (Jaroslav Kysela) [RHEL-80682]
  - SoundWire: pass stream to compute_params() (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: add lane in sdw_group_params (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: select data lane (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: check required freq accurately (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: correct clk_freq check in sdw_select_row_col (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: generic_bandwidth_allocation: set frame shape on fly (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: stream: program BUSCLOCK_SCALE (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: add sdw_slave_get_scale_index helper (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: skip DEPREPARED streams (Jaroslav Kysela) [RHEL-80682]
  - soundwire: stream: set DEPREPARED state earlier (Jaroslav Kysela) [RHEL-80682]
  - soundwire: add lane_used_bandwidth in struct sdw_bus (Jaroslav Kysela) [RHEL-80682]
  - soundwire: mipi_disco: read lane mapping properties from ACPI (Jaroslav Kysela) [RHEL-80682]
  - soundwire: add lane field in sdw_port_runtime (Jaroslav Kysela) [RHEL-80682]
  - soundwire: bus: Move irq mapping cleanup into devres (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ad1889: Use str_enabled_disabled() helper function (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hdsp: Use str_on_off() and str_yes_no() helper functions (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: force cast for snd_pcm_format_t type (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: remove redundant assignment to variable ret (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: don't include '<linux/find.h>' directly (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Increase the SoundWire attach timeout (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Use gpiod_set_raw for GPIO operations (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Prepare support for updated bios patch (Jaroslav Kysela) [RHEL-80682]
  - ASoC: qcom: sdm845: add handling of secondary MI2S clock (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt715: Remove unused hda_to_sdw (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: Unify clock direction by clk_direction (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: tidyup ret handling for card->disable_route_checks (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: mtl-match: Add CDB35L56-EIGHT-C 8x CS35L56 without CS42L43 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: mtl-match: Add CDB35L56-EIGHT-C with aggregated speakers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: tgl-match: Add entries for CS35L56 on CDB35L56-EIGHT-C (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: sof-priv: Remove unused SOF_DAI_STREAM() and SOF_FORMATS (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: ipc4-topology: Use macro to set the EXT_PARAM_SIZE in widget setup (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: hda-pcm: Follow the pause_supported flag to drop PAUSE support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Add support for pause supported tokens from topology (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_easrc: register m2m platform device (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc: register m2m platform device (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: Add memory to memory function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_easrc: define functions for memory to memory usage (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc: define functions for memory to memory usage (Jaroslav Kysela) [RHEL-80682]
  - ALSA: compress: Add output rate and output format support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sonicvibes: Use str_on_off() helper in snd_sonicvibes_proc_read() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: convert rt5682.txt to dt-schema (Jaroslav Kysela) [RHEL-80682]
  - ASoC: wm8985: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: wm8904: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tpa6130a2: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320aic3x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320aic31xx: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320adc3xxx: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas5720: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2562: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ssm2602: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: pcm186x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98095: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98090: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98088: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: alc5632: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: alc5623: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1977: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1781: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1761: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ad193x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: qcom,wcd9335: Drop number of DAIs from the header (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wcd9335: Add define for number of DAIs (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt713_vb_l2_rt1320_l13 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-lnl-match: add rt713_vb_l2_rt1320_l13 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add a dev_dbg message for the SOC_SDW_CODEC_MIC quirk (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Correct quirk for Lenovo Yoga Slim 7 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: improve the log of DAI link numbers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: reduce log level for not using internal dmic (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: correct mach_params->dmic_num (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: use for_each_of_graph_port() on graph_get_dai_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: check port reg first on graph_get_dai_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_sai: Add sample rate constraint (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Add sample rate constraint (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Switch to common sample rate constraint function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_utils: Add function to constrain rates (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: oss: fix typo in seq_oss_init.c (Jaroslav Kysela) [RHEL-80682]
  - ALSA: cmipci: Modify the incorrect format specifier (Jaroslav Kysela) [RHEL-80682]
  - ALSA: lola: Fix typo in lola_clock.c (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: ps: add ZSC control register programming sequence (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: ps: update mach params subsystem_rev variable (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Always check capability at opening a hwdep (Jaroslav Kysela) [RHEL-80682]
  - ASoC: sdw_utils: cs_amp: Assign non-overlapping TDM masks for each codec on a bus (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l56: Split SoundWire DAI into separate playback and capture (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix typo in hda_sysfs.h (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ac97: Modify the incorrect format specifier (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Skip notifications unless subscribed to announce port (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Notify client and port info changes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l51: Constify struct i2c_device_id (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: Fix redundant logical jump (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Add suspend and resume support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Use regmap for PHY and PLL registers (Jaroslav Kysela) [RHEL-80682]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-591.el9]
changelog:
  - uki_addons: add 'fedora' SBAT suffix for UKI addons (Li Tian) [RHEL-93399]
  - Subject: net/smc: check return value of sock_recvmsg when draining clc data (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: protect link down work from execute after lgr freed (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: Introduce IPPROTO_SMC (Mete Durlu) [RHEL-73484]
  - net/smc: expose smc proto operations (Mete Durlu) [RHEL-73484]
  - net/smc: refactoring initialization of smc sock (Mete Durlu) [RHEL-73484]
  - net/smc: change SMCR_RMBE_SIZES from 5 to 15 (Mete Durlu) [RHEL-73484]
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Mete Durlu) [RHEL-73484]
  - net/smc: implement DMB-merged operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - net/smc: adapt cursor update when sndbuf and peer DMB are merged (Mete Durlu) [RHEL-73484]
  - net/smc: add operations to merge sndbuf with peer DMB (Mete Durlu) [RHEL-73484]
  - net/smc: register loopback-ism into SMC-D device list (Mete Durlu) [RHEL-73484]
  - net/smc: ignore loopback-ism when dumping SMC-D devices (Mete Durlu) [RHEL-73484]
  - net/smc: mark optional smcd_ops and check for support when called (Mete Durlu) [RHEL-73484]
  - net/smc: implement DMB-related operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - net/smc: implement ID-related operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - redhat/configs: Add SMC_LO config option (Mete Durlu) [RHEL-73484]
  - net/smc: introduce loopback-ism for SMC intra-OS shortcut (Mete Durlu) [RHEL-73484]
  - net/smc: decouple ism_client from SMC-D DMB registration (Mete Durlu) [RHEL-73484]
  - net/smc: Avoid -Wflex-array-member-not-at-end warnings (Mete Durlu) [RHEL-73484]
  - net/smc: make smc_hash_sk/smc_unhash_sk static (Mete Durlu) [RHEL-73484]
  - net/smc: change the term virtual ISM to Emulated-ISM (Mete Durlu) [RHEL-73484]
  - net/smc: fix incorrect SMC-D link group matching logic (Mete Durlu) [RHEL-73484]
  - net/smc: fix invalid link access in dumping SMC-R connections (Mete Durlu) [RHEL-73484]
  - net/smc: manage system EID in SMC stack instead of ISM driver (Mete Durlu) [RHEL-73484]
  - net/smc: disable SEID on non-s390 archs where virtual ISM may be used (Mete Durlu) [RHEL-73484]
  - net/smc: support extended GID in SMC-D lgr netlink attribute (Mete Durlu) [RHEL-73484]
  - net/smc: compatible with 128-bits extended GID of virtual ISM device (Mete Durlu) [RHEL-73484]
  - net/smc: define a reserved CHID range for virtual ISM devices (Mete Durlu) [RHEL-73484]
  - net/smc: introduce virtual ISM device support feature (Mete Durlu) [RHEL-73484]
  - net/smc: support SMCv2.x supplemental features negotiation (Mete Durlu) [RHEL-73484]
  - net/smc: unify the structs of accept or confirm message for v1 and v2 (Mete Durlu) [RHEL-73484]
  - net/smc: introduce sub-functions for smc_clc_send_confirm_accept() (Mete Durlu) [RHEL-73484]
  - net/smc: rename some 'fce' to 'fce_v2x' for clarity (Mete Durlu) [RHEL-73484]
  - net/smc: fix missing byte order conversion in CLC handshake (Mete Durlu) [RHEL-73484]
  - net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty (Mete Durlu) [RHEL-73484]
  - net/smc: add sysctl for max conns per lgr for SMC-R v2.1 (Mete Durlu) [RHEL-73484]
  - net/smc: add sysctl for max links per lgr for SMC-R v2.1 (Mete Durlu) [RHEL-73484]
  - net/smc: put sk reference if close work was canceled (Mete Durlu) [RHEL-73484]
  - net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc (Mete Durlu) [RHEL-73484]
  - net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT (Mete Durlu) [RHEL-73484]
  - net/smc: return the right falback reason when prefix checks fail (Mete Durlu) [RHEL-73484]
  - net/smc: fix smc clc failed issue when netdevice not in init_net (Mete Durlu) [RHEL-73484]
  - net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add (Mete Durlu) [RHEL-73484]
  - net/smc: bugfix for smcr v2 server connect success statistic (Mete Durlu) [RHEL-73484]
  - net/smc: Extend SMCR v2 linkgroup netlink attribute (Mete Durlu) [RHEL-73484]
  - net/smc: support max links per lgr negotiation in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: support max connections per lgr negotiation (Mete Durlu) [RHEL-73484]
  - net/smc: support smc v2.x features validate (Mete Durlu) [RHEL-73484]
  - net/smc: add vendor unique experimental options area in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: support smc release version negotiation in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT (Mete Durlu) [RHEL-73484]
  - net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK (Mete Durlu) [RHEL-73484]
  - net/smc: Scan from current RMB list when no position specified (Mete Durlu) [RHEL-73484]
  - net/smc: Reset connection when trying to use SMCRv2 fails. (Mete Durlu) [RHEL-73484]
  - smc: Fix use-after-free in tcp_write_timer_handler(). (Mete Durlu) [RHEL-73484]
  - smc: preserve const qualifier in smc_sk() (Mete Durlu) [RHEL-73484]
  - net/smc: Use percpu ref for wr tx reference (Mete Durlu) [RHEL-73484]
  - net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() (Mete Durlu) [RHEL-73484]
  - vlan: enforce underlying device type (Guillaume Nault) [RHEL-87883] {CVE-2025-21920}
  - dm: fix copying after src array boundaries (Benjamin Marzinski) [RHEL-92761]
  - dm: add missing unlock on in dm_keyslot_evict() (Benjamin Marzinski) [RHEL-92761]
  - dm: always update the array size in realloc_argv on success (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: fix a warning on invalid table line (Benjamin Marzinski) [RHEL-92761]
  - dm-bufio: don't schedule in atomic context (Benjamin Marzinski) [RHEL-92761]
  - dm-ebs: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92761]
  - dm-verity: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: fix non-constant-time tag verification (Benjamin Marzinski) [RHEL-92761]
  - dm cache: support shrinking the origin device (Benjamin Marzinski) [RHEL-56106]
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Benjamin Marzinski) [RHEL-56106]
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: set ti->error on memory allocation failure (Benjamin Marzinski) [RHEL-92761]
  - NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew) [RHEL-83435]
  - MAINTAINERS: Update maintainers for crypto/marvell (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - suppress auth failure screaming due to negative tests (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Remove unused otx2_cpt_print_uc_dbg_info (Vladis Dronov) [RHEL-74335]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-74335]
  - crypto: marvell - replace deprecated PCI functions (Vladis Dronov) [RHEL-74335]
  - PCI: Make pcim_request_all_regions() a public function (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx* - Select CRYPTO_AUTHENC [partial] (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - select CONFIG_NET_DEVLINK (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Fix authenc setkey (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Remove custom swap functions in favor of built-in sort swap (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - update CPT inbound inline IPsec mailbox (Vladis Dronov) [RHEL-74335]
  - selftests: net: fdb_notify: Add a test for FDB notifications (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Add kill_process (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move checks from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move tests_run from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move logging from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: include lib/sh/*.sh with lib.sh (Ivan Vecera) [RHEL-78780]
  - selftests: mptcp: include net_helper.sh file (Ivan Vecera) [RHEL-78780]
  - selftests: mptcp: include lib.sh file (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: lib: Allow passing PID to stop_traffic() (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: Add a fallback cleanup() (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Introduce deferred commands (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: Convert log_test() to recognize RET values (Ivan Vecera) [RHEL-78780]
  - ndo_fdb_del: Add a parameter to report whether notification was sent (Izabela Bakollari) [RHEL-78780]
  - ndo_fdb_add: Add a parameter to report whether notification was sent (Izabela Bakollari) [RHEL-78780]
  - bonding: assign random address if device address is same as bond (Hangbin Liu) [RHEL-93062]
  - ice: Fix deinitializing VF in error path (Petr Oros) [RHEL-87626] {CVE-2025-21883}
  - ice: add E830 HW VF mailbox message limit support (Petr Oros) [RHEL-87626]
  - perf test stat_all_pmu.sh: Correctly check 'perf stat' result (Michael Petlan) [RHEL-81954]
  - perf test: Extra verbosity and hypervisor skip for tpebs test (Michael Petlan) [RHEL-81954]
  - perf test: Tag parallel failing shell tests with "(exclusive)" (Michael Petlan) [RHEL-81954]
  - perf test: Ignore security failures in all PMU test (Michael Petlan) [RHEL-81954]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-592.el9]
changelog:
  - drm: remove driver date from struct drm_driver and all drivers (Robert Foss) [RHEL-75950]
  - overflow: Introduce overflows_type() and castable_to_type() (Robert Foss) [RHEL-75950]
  - ASoC: hdmi-codec: move no_capture_mute to struct hdmi_codec_pdata (Robert Foss) [RHEL-75950]
  - ASoC: hdmi-codec: pass data to get_dai_id too (Robert Foss) [RHEL-75950]
  - kfifo: fix typos in kernel-doc (Robert Foss) [RHEL-75950]
  - kfifo: add kfifo_dma_out_prepare_mapped() (Robert Foss) [RHEL-75950]
  - kfifo: pass offset to setup_sgl_buf() instead of a pointer (Robert Foss) [RHEL-75950]
  - kfifo: rename l to len_to_end in setup_sgl() (Robert Foss) [RHEL-75950]
  - kfifo: remove support for physically non-contiguous memory (Robert Foss) [RHEL-75950]
  - kfifo: add kfifo_out_linear{,_ptr}() (Robert Foss) [RHEL-75950]
  - kfifo: introduce and use kfifo_skip_count() (Robert Foss) [RHEL-75950]
  - kfifo: drop __kfifo_dma_out_finish_r() (Robert Foss) [RHEL-75950]
  - arm64/efistub: Clean up KASLR logic (Lenny Szubowicz) [RHEL-33066]
  - efi/libstub: Cast away type warning in use of max() (Lenny Szubowicz) [RHEL-33066]
  - efi/libstub: fix efi_random_alloc() to allocate memory at alloc_min or higher address (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Remap kernel text read-only before dropping NX attribute (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-33066]
  - libstub: Fix compilation warning for rv32 (Lenny Szubowicz) [RHEL-33066]
  - arm64: libstub: Move KASLR handling functions to kaslr.c (Lenny Szubowicz) [RHEL-33066]
  - crypto: tegra - Fix IV usage for AES ECB (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix format specifier in (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Use HMAC fallback when keyslots are full (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Reserve keyslots to allocate dynamically (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Set IV to NULL explicitly for AES ECB (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix CMAC intermediate result handling (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix HASH intermediate result handling (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Transfer HASH init function to crypto engine (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - check return value for hash do_one_req (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - finalize crypto req on error (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Do not use fixed size buffers (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Use separate buffer for setkey (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - remove unneeded crypto_engine_stop() call (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - remove redundant error check on ret (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: engine - Remove prepare/unprepare request (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: iaa - Do not clobber req->base.data (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Move compression CRC into request object (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Test the correct request flag (Vladis Dronov) [RHEL-87768]
  - MAINTAINERS: Add Vinicius Gomes to MAINTAINERS for IAA Crypto (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (Vladis Dronov) [RHEL-87768]
  - scsi: target: iscsi: Fix timeout on deleted connection (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: tcm_loop: Fix wrong abort tag (Maurizio Lombardi) [RHEL-93481]
  - scsi: tcm_loop: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: Replace deprecated strncpy() with strscpy() (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: iscsi: Fix typos (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: spc: Fix RSOC parameter data header size (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: core: Add line break to status show (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: tcmu: Constify some structures (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: Fix incorrect function name in pscsi_create_type_disk() (Maurizio Lombardi) [RHEL-93481]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-593.el9]
changelog:
  - selftests/mm: virtual_address_range: avoid reading from VM_IO mappings (Li Wang) [RHEL-88165]
  - selftests/mm: vm_util: split up /proc/self/smaps parsing (Li Wang) [RHEL-88165]
  - mm: selftest to verify zero-filled pages are mapped to zeropage (Li Wang) [RHEL-88165]
  - selftests/mm: virtual_address_range: unmap chunks after validation (Li Wang) [RHEL-88165]
  - selftests/mm: virtual_address_range: mmap() without PROT_WRITE (Li Wang) [RHEL-88165]
  - selftest/mm: fix typo in virtual_address_range (Li Wang) [RHEL-88165]
  - selftests: add ksft_exit_fail_perror() (Li Wang) [RHEL-88165]
  - thermal: intel: int340x: Fix Panther Lake DLVR support (David Arcari) [RHEL-88234]
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids (Steve Dunnagan) [RHEL-89787]
  - cxl/core/regs: Refactor out functions to count regblocks of given type (John W. Linville) [RHEL-88727]
  - cxl/test: Update test code for event records to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update Memory Module Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update DRAM Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update General Media Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Add Component Identifier formatting for CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update Common Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/pci: Add CXL Type 1/2 support to cxl_dvsec_rr_decode() (John W. Linville) [RHEL-88727]
  - cxl/region: Fix region creation for greater than x2 switches (John W. Linville) [RHEL-88727]
  - cxl/pci: Check dport->regs.rcd_pcie_cap availability before accessing (John W. Linville) [RHEL-88727]
  - cxl/pci: Fix potential bogus return value upon successful probing (John W. Linville) [RHEL-88727]
  - cxl/region: Refactor common create region code (John W. Linville) [RHEL-88727]
  - cxl/hdm: Use guard() in cxl_dpa_set_mode() (John W. Linville) [RHEL-88727]
  - cxl/pci: Delay event buffer allocation (John W. Linville) [RHEL-88727]
  - cxl/cdat: Use %pra for dpa range outputs (John W. Linville) [RHEL-88727]
  - cxl: downgrade a warning message to debug level in cxl_probe_component_regs() (John W. Linville) [RHEL-88727]
  - cxl/pci: Add sysfs attribute for CXL 1.1 device link status (John W. Linville) [RHEL-88727]
  - cxl/core/regs: Add rcd_pcie_cap initialization (John W. Linville) [RHEL-88727]
  - cxl/test: Improve init-order fidelity relative to real-world systems (John W. Linville) [RHEL-88727]
  - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return (John W. Linville) [RHEL-88727]
  - cxl/port: Fix CXL port initialization order when the subsystem is built-in (John W. Linville) [RHEL-88727]
  - cxl: Fix comment regarding cxl_query_cmd() return data (John W. Linville) [RHEL-88727]
  - cxl: Convert cxl_internal_send_cmd() to use 'struct cxl_mailbox' as input (John W. Linville) [RHEL-88727]
  - cxl: Move mailbox related bits to the same context (John W. Linville) [RHEL-88727]
  - cxl: move cxl headers to new include/cxl/ directory (John W. Linville) [RHEL-88727]
  - cxl/region: Remove lock from memory notifier callback (John W. Linville) [RHEL-88727]
  - cxl/pci: simplify the check of mem_enabled in cxl_hdm_decode_init() (John W. Linville) [RHEL-88727]
  - cxl/pci: Check Mem_info_valid bit for each applicable DVSEC (John W. Linville) [RHEL-88727]
  - cxl/pci: Remove duplicated implementation of waiting for memory_info_valid (John W. Linville) [RHEL-88727]
  - cxl/pci: Remove duplicate host_bridge->native_aer checking (John W. Linville) [RHEL-88727]
  - cxl/pci: cxl_dport_map_rch_aer() cleanup (John W. Linville) [RHEL-88727]
  - cxl/pci: Rename cxl_setup_parent_dport() and cxl_dport_map_regs() (John W. Linville) [RHEL-88727]
  - cxl/port: Refactor __devm_cxl_add_port() to drop goto pattern (John W. Linville) [RHEL-88727]
  - cxl/port: Use scoped_guard()/guard() to drop device_lock() for cxl_port (John W. Linville) [RHEL-88727]
  - cxl/port: Use __free() to drop put_device() for cxl_port (John W. Linville) [RHEL-88727]
  - cxl: Remove duplicate included header file core.h (John W. Linville) [RHEL-88727]
  - tools/testing/cxl: Use dev_is_platform() (John W. Linville) [RHEL-88727]
  - cxl/port: Convert to use ERR_CAST() (John W. Linville) [RHEL-88727]
  - cxl/core/pci: Move reading of control register to immediately before usage (John W. Linville) [RHEL-88727]
  - cxl: Remove defunct code calculating host bridge target positions (John W. Linville) [RHEL-88727]
  - cxl/core: Fold cxl_trace_hpa() into cxl_dpa_to_hpa() (John W. Linville) [RHEL-88727]
  - cxl/test: Replace ENXIO with EBUSY for inject poison limit reached (John W. Linville) [RHEL-88727]
  - cxl/memdev: Replace ENXIO with EBUSY for inject poison limit reached (John W. Linville) [RHEL-88727]
  - cxl/acpi: Warn on mixed CXL VH and RCH/RCD Hierarchy (John W. Linville) [RHEL-88727]
  - cxl/region: Simplify cxl_region_nid() (John W. Linville) [RHEL-88727]
  - cxl/region: Support to calculate memory tier abstract distance (John W. Linville) [RHEL-88727]
  - cxl: add missing MODULE_DESCRIPTION() macros (John W. Linville) [RHEL-88727]
  - cxl/events: Use a common struct for DRAM and General Media events (John W. Linville) [RHEL-88727]
  - unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-92670]
  - debugfs: Fix the missing initializations in __debugfs_file_get() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - saner replacement for debugfs_rename() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: take debugfs_short_fops definition out of ifdef (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: allow to store an additional opaque pointer at file creation (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: don't mess with bits in ->d_fsdata (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: get rid of dynamically allocation proxy_ops (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: move ->automount into debugfs_inode_info (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: separate cache for debugfs inodes (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: drop inline constant formatting for ERR_PTR(-ERROR) (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: update comment of debugfs_rename() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - OPP: fix error checking in opp_migrate_dentry() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: fix oops during rmmod (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: use IS_ERR instead of NULL check in bond_create_debugfs (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: remove redundant NULL check in debugfs function (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: fix error checking in bond_debug_reregister() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - iommu/amd: Enable support for up to 2K interrupts per function (Eder Zulian) [RHEL-22785]
  - iommu/amd: Rename DTE_INTTABLEN* and MAX_IRQS_PER_TABLE macro (Eder Zulian) [RHEL-22785]
  - iommu/amd: Replace slab cache allocator with page allocator (Eder Zulian) [RHEL-22785]
  - iommu/amd: Introduce generic function to set multibit feature value (Eder Zulian) [RHEL-22785]
  - qed: remove cast to pointers passed to kfree (John Meneghini) [RHEL-72637]
  - net: qed: make 'qed_ll2_ops_pass' as __maybe_unused (John Meneghini) [RHEL-72637]
  - net: qed: fix typos (John Meneghini) [RHEL-72637]
  - scsi: Constify struct pci_device_id (John Meneghini) [RHEL-72637]
  - qed: fix possible uninit pointer read in qed_mcp_nvm_info_populate() (John Meneghini) [RHEL-72637]
  - net/qed: allow old cards not supporting "num_images" to work (John Meneghini) [RHEL-72637]
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (John Meneghini) [RHEL-72637]
  - scsi: qedf: Remove dead code (John Meneghini) [RHEL-72637]
  - net: qlogic: use ethtool string helpers (John Meneghini) [RHEL-72637]
  - scsi: qedf: Remove trailing space after \n newline (John Meneghini) [RHEL-72637]
  - scsi: qedf: Call scsi_done() directly (John Meneghini) [RHEL-72637]
  - scsi: qedf: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (John Meneghini) [RHEL-72637]
  - message deprecated state in ahci_xgene, ahci_seattle and hisi_sas_main (Tomas Henzl) [RHEL-95986]
  - s390/cpumf: Update CPU Measurement facility extended counter set support (Mete Durlu) [RHEL-90738]
  - selftests/mm: restore default nr_hugepages value during cleanup in hugetlb_reparenting_test.sh (Li Wang) [RHEL-86180]
  - selftest/mm: make hugetlb_reparenting_test tolerant to async reparenting (Li Wang) [RHEL-86180]
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Li Wang) [RHEL-86180]
  - perf: arm_cspmu: nvidia: monitor all ports by default (Michael Petlan) [RHEL-89488]
  - perf: arm_cspmu: nvidia: enable NVLINK-C2C port filtering (Michael Petlan) [RHEL-89488]
  - perf: arm_cspmu: nvidia: fix sysfs path in the kernel doc (Michael Petlan) [RHEL-89488]
  - perf: arm_cspmu: nvidia: remove unsupported SCF events (Michael Petlan) [RHEL-89488]
  - lazy tlb: fix hotplug exit race with MMU_LAZY_TLB_SHOOTDOWN (Herton R. Krzesinski) [RHEL-82922]
  - dim: pass dim_sample to net_dim() by reference (Ivan Vecera) [RHEL-94962]
  - dim: make dim_calc_stats() inputs const pointers (Ivan Vecera) [RHEL-94962]
  - linux/dim: Do nothing if no time delta between samples (Ivan Vecera) [RHEL-94962]
  - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Mamatha Inamdar) [RHEL-94838]
  - octeon_ep_vf: Resolve netdevice usage count issue (Kamal Heib) [RHEL-83999]
  - rtla: Define _GNU_SOURCE in timerlat_bpf.c (Tomas Glozar) [RHEL-88653]
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CKI Backport Bot) [RHEL-83195] {CVE-2025-21848}
  - scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer (Ewan D. Milne) [RHEL-94042]
  - scsi: Improve CDL control (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Clear flags for scsi_cmnd that did not complete (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_transport_srp: Replace min/max nesting with clamp() (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Tighten the page format heuristics with MODE SELECT (Ewan D. Milne) [RHEL-94042]
  - scsi: st: ERASE does not change tape location (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Fix array overflow in st_setup() (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Use a switch statement when attaching VPD pages (Ewan D. Milne) [RHEL-94042]
  - scsi: logging: Fix scsi_logging_level bounds (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_error: Add comments to scsi_check_sense() (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Fix uninitialized variable use (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Fix missing lock protection (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Do not sleep in atomic sections (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Simplify command handling (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Remove a reference to in_use_bm (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Remove sdebug_device_access_info (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add support for partitioning the tape (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Reset tape setting at device reset (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add compression mode page for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add read support and update locate for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add write support with block lengths and 4 bytes of data (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add READ BLOCK LIMITS and modify LOAD for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: First fixes for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Add sysfs file position_lost_in_reset (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Modify st.c to use the new scsi_error counters (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Restore some drive settings after reset (Ewan D. Milne) [RHEL-94042]
  - scsi: sg: Enable runtime power management (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Fix input/output error on empty drive reset (Ewan D. Milne) [RHEL-94042]
  - scsi: mpi3mr: Fix ATA NCQ priority support (Ewan D. Milne) [RHEL-94042]
  - scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume() (Ewan D. Milne) [RHEL-94042]
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Luis Claudio R. Goncalves) [RHEL-79183]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-594.el9]
changelog:
  - tools: ynl: add all headers to makefile deps (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - selftests: drv-net: add missing trailing backslash (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement cap validation in the core (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net: shaper: implement introspection support (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - netlink: spec: add shaper introspection support (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement shaper cleanup on queue deletion (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement delete support for NODE scope shaper (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement NL group operation (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement NL set and delete operations (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement NL get operation (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - netlink: spec: add shaper YAML spec (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - testing: net-drv: add basic shaper test (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - genetlink: extend info user-storage to match NL cb ctx (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - smb: client: fix UAF in decryption with multichannel (CKI Backport Bot) [RHEL-94457] {CVE-2025-37750}
  - RDMA/irdma: Remove deliver net device event (Kamal Heib) [RHEL-87576]
  - RDMA/irdma: Remove unused irdma_cqp_*_fpm_val_cmd functions (Kamal Heib) [RHEL-87576]
  - RDMA/irdma: Fix misspelling of "accept*" (Kamal Heib) [RHEL-87576]
  - RDMA/irdma: fix error message in irdma_modify_qp_roce() (Kamal Heib) [RHEL-87576]
  - x86/tsc: Use topology_max_packages() to get package number (David Arcari) [RHEL-92573]
  - perf/x86/intel/uncore: Add Clearwater Forest support (Michael Petlan) [RHEL-45095]
  - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-94247] {CVE-2025-37738}
  - net: rename netns_local to netns_immutable (Ivan Vecera) [RHEL-91110]
  - ynl: devlink: add missing board-serial-number (Petr Oros) [RHEL-75600]
  - devlink: fix xa_alloc_cyclic() error handling (Petr Oros) [RHEL-75600]
  - devlink: add devl guard (Petr Oros) [RHEL-75600]
  - pldmfw: enable selected component update (Petr Oros) [RHEL-75600]
  - devlink: Improve the port attributes description (Petr Oros) [RHEL-75600]
  - devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-75600]
  - devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-75600]
  - devlink: remove unused devlink_resource_register() (Petr Oros) [RHEL-75600]
  - devlink: remove unused devlink_resource_occ_get_register() and _unregister() (Petr Oros) [RHEL-75600]
  - devlink: region: snapshot IDs: consolidate error values (Petr Oros) [RHEL-75600]
  - devlink: devl_resource_register(): differentiate error codes (Petr Oros) [RHEL-75600]
  - devlink: use devlink_nl_put_u64() helper (Petr Oros) [RHEL-75600]
  - devlink: introduce devlink_nl_put_u64() (Petr Oros) [RHEL-75600]
  - tools: ynl-gen: use names of constants in generated limits (Petr Oros) [RHEL-75600]
  - tools: ynl-gen: refactor check validation for TypeBinary (Petr Oros) [RHEL-75600]
  - scsi: bnx2fc: Use kthread_create_on_cpu() (John Meneghini) [RHEL-94578]
  - net: bnx2x: use ethtool string helpers (John Meneghini) [RHEL-94578]
  - scsi: libfcoe: Include <linux/prandom.h> instead of <linux/random.h> (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Remove some unused fields in struct bnx2fc_rport (John Meneghini) [RHEL-94578]
  - net: cnic: Convert tasklet API to new bottom half workqueue mechanism (John Meneghini) [RHEL-94578]
  - scsi: libfc: Add some kernel-doc comments (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Remove redundant assignment to variable 'i' (John Meneghini) [RHEL-94578]
  - scsi: libfc: replace deprecated strncpy() with memcpy() (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Make fcoe_bus_type const (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Fix unsigned comparison with zero in store_ctlr_mode() (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Use sysfs_match_string() over fcoe_parse_mode() (John Meneghini) [RHEL-94578]
  - scsi: libfc: Map FC_TIMED_OUT to DID_TIME_OUT (John Meneghini) [RHEL-94578]
  - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (John Meneghini) [RHEL-94578]
  - scsi: libfc: Don't schedule abort twice (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Replace deprecated strncpy() with strscpy() (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Do not rely on a SCSI command for LUN or target reset (John Meneghini) [RHEL-94578]
  - scsi: libfcoe: Replace all non-returning strlcpy() with strscpy() (John Meneghini) [RHEL-94578]
  - bnx2: remove deadcode in bnx2_init_cpus() (John Meneghini) [RHEL-94578]
  - scsi: libfc: Include the correct header (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Fix possible name leak when device_register() fails (John Meneghini) [RHEL-94578]
  - scsi: libfc: Remove redundant variable ev_qual (John Meneghini) [RHEL-94578]
  - bnx2: Use kmalloc_size_roundup() to match ksize() usage (John Meneghini) [RHEL-94578]
  - bnx2: Fix spelling mistake "bufferred" -> "buffered" (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Remove redundant assignment to variable 'wlen' (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Use per-CPU API to update per-CPU statistics (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Add a local_lock to fcoe_percpu (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Simplify if-if to if-else (John Meneghini) [RHEL-94578]
  - scsi: libfc: Replace one-element arrays with flexible-array members (John Meneghini) [RHEL-93390]
  - scsi: bnx2fc: Stop using the SCSI pointer (John Meneghini) [RHEL-94578]
  - scsi: libfc: Stop using the SCSI pointer (John Meneghini) [RHEL-94578]
  - bnx2: Fix an error message (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Use netif_is_bond_master() instead of open code (John Meneghini) [RHEL-94578]
  - scsi: libfc: Call scsi_done() directly (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Call scsi_done() directly (John Meneghini) [RHEL-94578]
  - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-93631] {CVE-2025-23150}
  - net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-93830]
  - ibmveth: Always stop tx queues during close (Mamatha Inamdar) [RHEL-93830]
  - perf/x86/rapl: Add support for Intel Arrow Lake U (Michael Petlan) [RHEL-53585]
  - perf/x86/intel: Add PMU support for ArrowLake-H (Michael Petlan) [RHEL-20094]
  - perf/x86/intel: Support hybrid PMU with multiple atom uarchs (Michael Petlan) [RHEL-20094]
  - x86/cpu/intel: Define helper to get CPU core native ID (Michael Petlan) [RHEL-20094]
  - perf/x86: Refine hybrid_pmu_type defination (Michael Petlan) [RHEL-20094]
  - fs/file.c: add fast path in find_next_fd() (Ian Kent) [RHEL-38570]
  - fs/file.c: conditionally clear full_fds (Ian Kent) [RHEL-38570]
  - fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd() (Ian Kent) [RHEL-38570]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-595.el9]
changelog:
  - Squashfs: fix handling and sanity checking of xattr_ids count (CKI Backport Bot) [RHEL-93466] {CVE-2023-52933}
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-83573]
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-83573]
  - i40e: use generic unrolled_count() macro (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_dcb_hw_get_num_tc (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_asq_send_command_v2 (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_commit_partition_bw_setting (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_del_filter (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_get_cur_guaranteed_fd_count (Dennis Chen) [RHEL-83573]
  - i40e: Deadcode profile code (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_(read|write)_phy_register (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_blink_phy_link_led (Dennis Chen) [RHEL-83573]
  - i40e: Deadcode i40e_aq_* (Dennis Chen) [RHEL-83573]
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Jeff Moyer) [RHEL-75893] {CVE-2024-56662}
  - io_uring/sqpoll: zero sqd->thread on tctx errors (Jeff Moyer) [RHEL-74645] {CVE-2025-21633}
  - i2c: tegra: check msg length in SMBUS block read (Steve Dunnagan) [RHEL-89167]
  - x86/CPU/AMD: Print the reason for the last reset (David Arcari) [RHEL-89441]
  - Documentation: Add AMD Zen debugging document (David Arcari) [RHEL-89441]
  - platform/x86/amd/pmc: Use FCH_PM_BASE definition (David Arcari) [RHEL-89441]
  - i2c: piix4, x86/platform: Move the SB800 PIIX4 FCH definitions to <asm/amd/fch.h> (David Arcari) [RHEL-89441]
  - i2c: piix4: Make CONFIG_I2C_PIIX4 dependent on CONFIG_X86 (David Arcari) [RHEL-89441]
  - i2c: piix4: Export i2c_piix4 driver functions as library (David Arcari) [RHEL-89441]
  - i2c: piix4: Move i2c_piix4 macros and structures to common header (David Arcari) [RHEL-89441]
  - i2c: piix4: Change the parameter list of piix4_transaction function (David Arcari) [RHEL-89441]
  - i2c: don't use ',' after delimiters [partial] (David Arcari) [RHEL-89441]
  - i2c: piix4: Register SPDs (David Arcari) [RHEL-89441]
  - i2c: piix4: reword according to newest specification (David Arcari) [RHEL-89441]
  - i2c: piix4: Fix adapter not be removed in piix4_remove() (David Arcari) [RHEL-89441]
  - net: geneve: Leverage core stats allocator (Paolo Abeni) [RHEL-93467]
  - redhat/configs: remove automotive directory (Eric Chanudet) [RHEL-96355]
  - net: hsr: fix fill_frame_info() regression vs VLAN packets (Felix Maurer) [RHEL-84580]
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Felix Maurer) [RHEL-84580]
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Felix Maurer) [RHEL-84580]
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CKI Backport Bot) [RHEL-82650] {CVE-2024-58083}
  - bus: mhi: host: Fix race between unprepare and queue_buf (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: pci_generic: Add support for SA8775P endpoint (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Remove unused functions (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Avoid possible uninitialized fw_load_type (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Add a policy to enable image transfer via BHIe in PBL (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Refactor BHI/BHIe based firmware loading (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: pci_generic: fix MHI BAR mapping (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: pci_generic: Use pcim_iomap_region() to request and map MHI BAR (Mattijs Korpershoek) [RHEL-93889]
  - docs: ABI: sysfs-bus-mhi: Update contact info (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Update device ID for SA8775P (Mattijs Korpershoek) [RHEL-93889]
  - PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio' (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Fix the DMA data direction of dma_unmap_single() (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Enable MHI async read/write support (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Add support for DMA async read/write operation (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Simulate async read/write using iATU (Mattijs Korpershoek) [RHEL-93889]
  - md/raid1: Add check for missing source disk in process_checks() (Nigel Croxon) [RHEL-96672]
  - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Thomas Huth) [RHEL-86670]
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (Thomas Huth) [RHEL-85183]
  - KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (Thomas Huth) [RHEL-85183]
  - KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (Thomas Huth) [RHEL-85183]
  - KVM: s390: vsie: fix virtual/physical address in unpin_scb() (Thomas Huth) [RHEL-85183]
  - KVM: s390: Increase size of union sca_utility to four bytes (Thomas Huth) [RHEL-85183]
  - KVM: s390: Remove one byte cmpxchg() usage (Thomas Huth) [RHEL-85183]
  - KVM: s390: Use try_cmpxchg() instead of cmpxchg() loops (Thomas Huth) [RHEL-85183]
  - s390/mm/gmap: Fix __gmap_fault() return code (Thomas Huth) [RHEL-85183]
  - s390/mm/gmap: Refactor gmap_fault() and add support for pfault (Thomas Huth) [RHEL-85183]
  - s390/kvm: Remove kvm_arch_fault_in_page() (Thomas Huth) [RHEL-85183]
  - KVM: s390: Use kvm_release_page_dirty() to unpin "struct page" memory (Thomas Huth) [RHEL-85183]
  - s390/kvm: Move bitfields for dat tables (Thomas Huth) [RHEL-85183]
  - s390/entry: Pass the asce as parameter to sie64a() (Thomas Huth) [RHEL-85183]
  - kvm: s390: Reject memory region operations for ucontrol VMs (Thomas Huth) [RHEL-85183]
  - KVM: s390: vsie: retry SIE instruction on host intercepts (Thomas Huth) [RHEL-85183]
  - KVM: s390: Don't re-setup dummy routing when KVM_CREATE_IRQCHIP (Thomas Huth) [RHEL-85183]
  - procfs: fix a locking bug in a vmcore_add_device_dump() error path (Thomas Huth) [RHEL-72974]
  - redhat: Enable CONFIG_VIRTIO_MEM on s390x (Thomas Huth) [RHEL-72974]
  - s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (Thomas Huth) [RHEL-72974]
  - virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (Thomas Huth) [RHEL-72974]
  - virtio-mem: remember usable region size (Thomas Huth) [RHEL-72974]
  - virtio-mem: mark device ready before registering callbacks in kdump mode (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM ranges in 2nd kernel (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: factor out freeing a list of vmcore ranges (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: factor out allocating a vmcore range and adding it to a list (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: move vmcore definitions out of kcore.h (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: prefix all pr_* with "vmcore:" (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: disallow vmcore modifications while the vmcore is open (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (Thomas Huth) [RHEL-72974]
  - s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (Thomas Huth) [RHEL-72974]
  - s390/sparsemem: Reduce section size to 128 MiB (Thomas Huth) [RHEL-72974]
  - lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (Thomas Huth) [RHEL-72974]
  - virtio-mem: s390 support (Thomas Huth) [RHEL-72974]
  - s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM memory devices (Thomas Huth) [RHEL-72974]
  - Documentation: s390-diag.rst: Document diag500(STORAGE LIMIT) subfunction (Thomas Huth) [RHEL-72974]
  - Documentation: s390-diag.rst: Make diag500 a generic KVM hypercall (Thomas Huth) [RHEL-72974]
  - s390/boot: Replace S390_lowcore by get_lowcore() (Thomas Huth) [RHEL-72974]
  - s390: Add get_lowcore() function (Thomas Huth) [RHEL-72974]
  - s390: Sort mcount locations at build time (Thomas Huth) [RHEL-86670]
  - s390/build: Avoid relocation information in final vmlinux (Thomas Huth) [RHEL-86670]
  - s390/boot: Fix KASLR base offset off by __START_KERNEL bytes (Thomas Huth) [RHEL-86670]
  - s390/mm: Allow large pages for KASAN shadow mapping (Thomas Huth) [RHEL-86670]
  - s390/boot: Avoid possible physmem_info segment corruption (Thomas Huth) [RHEL-86670] {CVE-2024-45014}
  - s390: Fix linker error when -no-pie option is unavailable (Thomas Huth) [RHEL-86670]
  - s390: Always enable EXPOLINE_EXTERN if supported (Thomas Huth) [RHEL-86670]
  - s390/mm: Fix DirectMap accounting (Thomas Huth) [RHEL-86670]
  - s390/mm/ptdump: Fix handling of identity mapping area (Thomas Huth) [RHEL-86670]
  - s390/setup: Fix __pa/__va for modules under non-GPL licenses (Thomas Huth) [RHEL-86670]
  - pgtable: fix s390 ptdesc field comments (Thomas Huth) [RHEL-86670]
  - s390/kfence: Split kfence pool into 4k mappings in arch_kfence_init_pool() (Thomas Huth) [RHEL-86670]
  - s390: mm: accelerate pagefault when badaccess (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: move VM_FAULT_ERROR handling to do_exception() (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: remove VM_FAULT_BADMAP and VM_FAULT_BADACCESS (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: remove VM_FAULT_SIGNAL (Thomas Huth) [RHEL-86670]
  - s390/mm: remove __GFP_HIGHMEM masking (Thomas Huth) [RHEL-86670]
  - s390/dasd: Fix invalid dereferencing of indirect CCW data pointer (Thomas Huth) [RHEL-86670]
  - s390/vfio_ccw: Fix target addresses of TIC CCWs (Thomas Huth) [RHEL-86670]
  - s390: Update defconfigs (Thomas Huth) [RHEL-86670]
  - s390: remove native mmap2() syscall (Thomas Huth) [RHEL-86670]
  - s390/boot: Do not adjust GOT entries for undef weak sym (Thomas Huth) [RHEL-86670]
  - s390/sclp: Fix sclp_init() cleanup on failure (Thomas Huth) [RHEL-86670]
  - s390/virtio_ccw: Fix config change notifications (Thomas Huth) [RHEL-86670]
  - s390/mm: Restore mapping of kernel image using large pages (Thomas Huth) [RHEL-86670]
  - s390/mm: Allow large pages only for aligned physical addresses (Thomas Huth) [RHEL-86670]
  - s390: Update defconfigs (Thomas Huth) [RHEL-86670]
  - s390/crash: Do not use VM info if os_info does not have it (Thomas Huth) [RHEL-86670]
  - s390/zcrypt: Use kvcalloc() instead of kvmalloc_array() (Thomas Huth) [RHEL-86670]
  - s390/kprobes: Remove custom insn slot allocator (Thomas Huth) [RHEL-86670]
  - s390/boot: Remove alt_stfle_fac_list from decompressor (Thomas Huth) [RHEL-86670]
  - s390/ap: Fix bind complete udev event sent after each AP bus scan (Thomas Huth) [RHEL-86670]
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Thomas Huth) [RHEL-86670]
  - s390/ipl: Introduce sysfs attribute 'scp_data' for dump ipl (Thomas Huth) [RHEL-86670]
  - s390/ipl: Introduce macros for (re)ipl sysfs attribute 'scp_data' (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix incorrect initialization of nvme dump block (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix incorrect initialization of len fields in nvme reipl block (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix never less than zero warning (Thomas Huth) [RHEL-86670]
  - s390/ipl: Do not accept z/VM CP diag X'008' cmds longer than max length (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix size of vmcmd buffers for sending z/VM CP diag X'008' cmds (Thomas Huth) [RHEL-86670]
  - s390/alternatives: Convert runtime sanity check into compile time check (Thomas Huth) [RHEL-86670]
  - s390/iucv: Unexport iucv_root (Thomas Huth) [RHEL-86670]
  - tty: hvc-iucv: Make use of iucv_alloc_device() (Thomas Huth) [RHEL-86670]
  - tty: hvc-iucv: fix function pointer casts (Thomas Huth) [RHEL-86670]
  - tty: hvc: convert to u8 and size_t (Thomas Huth) [RHEL-86670]
  - s390/vmlogrdr: Make use of iucv_alloc_device() (Thomas Huth) [RHEL-86670]
  - s390/irq: Set CIF_NOHZ_DELAY in do_io_irq() (Thomas Huth) [RHEL-86670]
  - s390: Mark psw in __load_psw_mask() as __unitialized (Thomas Huth) [RHEL-86670]
  - s390/vtime: Use get_cpu_timer() (Thomas Huth) [RHEL-86670]
  - s390/idle: Rewrite psw_idle() in C (Thomas Huth) [RHEL-86670]
  - s390/ftrace: Avoid calling unwinder in ftrace_return_address() (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Use break instead of return statement (Thomas Huth) [RHEL-86670]
  - s390/stackstrace: Detect vdso stack frames (Thomas Huth) [RHEL-86670]
  - s390/vdso: Introduce and use struct stack_frame_vdso_wrapper (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Improve detection of invalid instruction pointers (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Skip first user stack frame (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Merge perf_callchain_user() and arch_stack_walk_user() (Thomas Huth) [RHEL-86670]
  - s390/ftrace: Use unwinder instead of __builtin_return_address() (Thomas Huth) [RHEL-86670]
  - s390: add USER_STACKTRACE support (Thomas Huth) [RHEL-86670]
  - s390/perf: implement perf_callchain_user() (Thomas Huth) [RHEL-86670]
  - s390/fpu: Remove comment about TIF_FPU (Thomas Huth) [RHEL-86670]
  - s390/pci: Add missing virt_to_phys() for directed DIBV (Thomas Huth) [RHEL-86670]
  - s390/vdso: Use standard stack frame layout (Thomas Huth) [RHEL-86670]
  - s390/vdso: Generate unwind information for C modules (Thomas Huth) [RHEL-86670]
  - s390/pgtable: Add missing hardware bits for puds, pmds (Thomas Huth) [RHEL-86670]
  - s390: Compile kernel with -fPIC and link with -no-pie (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: Drop .hash and .gnu.hash for !CONFIG_PIE_BUILD (Thomas Huth) [RHEL-86670]
  - s390/os_info: Fix array size in struct os_info (Thomas Huth) [RHEL-86670]
  - s390/os_info: Initialize old os_info in standalone dump kernel (Thomas Huth) [RHEL-86670]
  - s390/vfio-ap: Driver feature advertisement (Thomas Huth) [RHEL-73321]
  - docs: Update s390 vfio-ap doc for ap_config sysfs attribute (Thomas Huth) [RHEL-73321]
  - s390/vfio-ap: Add write support to sysfs attr ap_config (Thomas Huth) [RHEL-73321]
  - s390/vfio-ap: Ignore duplicate link requests in vfio_ap_mdev_link_queue (Thomas Huth) [RHEL-73321]
  - s390/vfio-ap: Add sysfs attr, ap_config, to export mdev state (Thomas Huth) [RHEL-73321]
  - s390/ap: Externalize AP bus specific bitmap reading function (Thomas Huth) [RHEL-73321]
  - s390/ap: make ap_bus_type const (Thomas Huth) [RHEL-73321]
  - s390/expoline: Make modules use kernel expolines (Thomas Huth) [RHEL-86670]
  - s390/nospec: Correct modules thunk offset calculation (Thomas Huth) [RHEL-86670]
  - s390/boot: Do not rescue .vmlinux.relocs section (Thomas Huth) [RHEL-86670]
  - s390/boot: Rework deployment of the kernel image (Thomas Huth) [RHEL-86670]
  - redhat: Set the CONFIG_KERNEL_IMAGE_BASE option (Thomas Huth) [RHEL-86670]
  - s390: Map kernel at fixed location when KASLR is disabled (Thomas Huth) [RHEL-86670]
  - s390/mm: Uncouple physical vs virtual address spaces (Thomas Huth) [RHEL-86670]
  - s390/crash: Use old os_info to create PT_LOAD headers (Thomas Huth) [RHEL-86670]
  - s390/vmcoreinfo: Store virtual memory layout (Thomas Huth) [RHEL-86670]
  - s390/os_info: Store virtual memory layout (Thomas Huth) [RHEL-86670]
  - s390/os_info: Introduce value entries (Thomas Huth) [RHEL-86670]
  - s390/boot: Make .amode31 section address range explicit (Thomas Huth) [RHEL-86670]
  - s390/boot: Make identity mapping base address explicit (Thomas Huth) [RHEL-86670]
  - s390/boot: Uncouple virtual and physical kernel offsets (Thomas Huth) [RHEL-86670]
  - s390/mm: Create virtual memory layout structure (Thomas Huth) [RHEL-86670]
  - s390/mm: Move KASLR related to <asm/page.h> (Thomas Huth) [RHEL-86670]
  - s390/boot: Swap vmalloc and Lowcore/Real Memory Copy areas (Thomas Huth) [RHEL-86670]
  - s390/boot: Reduce size of identity mapping on overlap (Thomas Huth) [RHEL-86670]
  - s390/boot: Consider DCSS segments on memory layout setup (Thomas Huth) [RHEL-86670]
  - s390/boot: Do not force vmemmap to start at MAX_PHYSMEM_BITS (Thomas Huth) [RHEL-86670]
  - s390/irq,nmi: Include <asm/vtime.h> header directly (Thomas Huth) [RHEL-86670]
  - s390/cio: fix tracepoint subchannel type field (Thomas Huth) [RHEL-86670]
  - s390/mm: Convert gmap_make_secure to use a folio (Thomas Huth) [RHEL-86670]
  - s390/mm: Convert make_page_secure to use a folio (Thomas Huth) [RHEL-86670]
  - s390: adjust indentation of RELOCS command build step out (Thomas Huth) [RHEL-86670]
  - s390/cio: convert sprintf()/snprintf() to sysfs_emit() (Thomas Huth) [RHEL-86670]
  - redhat: Rename CONFIG_ZCRYPT_DEBUG to CONFIG_AP_DEBUG (Thomas Huth) [RHEL-86670]
  - s390/ap: rename ap debug configuration option (Thomas Huth) [RHEL-86670]
  - redhat: Enable new CONFIG_AP option (Thomas Huth) [RHEL-86670]
  - s390/ap: modularize ap bus (Thomas Huth) [RHEL-86670]
  - s390/chsc: use notifier for AP configuration changes (Thomas Huth) [RHEL-86670]
  - s390/ap: swap IRQ and bus/device registration (Thomas Huth) [RHEL-86670]
  - s390/ap: rework ap initialization (Thomas Huth) [RHEL-86670]
  - s390/ap: use static qci information (Thomas Huth) [RHEL-86670]
  - s390/cio: Ensure the copied buf is NUL terminated (Thomas Huth) [RHEL-86670]
  - s390/vdso: Add CFI for RA register to asm macro vdso_func (Thomas Huth) [RHEL-86670]
  - s390/3270: Fix buffer assignment (Thomas Huth) [RHEL-86670]
  - s390/mm: Fix clearing storage keys for huge pages (Thomas Huth) [RHEL-86670]
  - s390/mm: Fix NULL pointer dereference (Thomas Huth) [RHEL-86670]
  - s390/entry: align system call table on 8 bytes (Thomas Huth) [RHEL-86670]
  - s390/pai: fix sampling event removal for PMU device driver (Thomas Huth) [RHEL-86670]
  - s390/preempt: mark all functions __always_inline (Thomas Huth) [RHEL-86670]
  - s390/atomic: mark all functions __always_inline (Thomas Huth) [RHEL-86670]
  - s390/mm: fix NULL pointer dereference (Thomas Huth) [RHEL-86670]
  - s390/entry: compare gmap asce to determine guest/host fault (Thomas Huth) [RHEL-86670]
  - s390/entry: remove OUTSIDE macro (Thomas Huth) [RHEL-86670]
  - s390/entry: add CIF_SIE flag and remove sie64a() address check (Thomas Huth) [RHEL-86670]
  - s390/cio: use while (i--) pattern to clean up (Thomas Huth) [RHEL-86670]
  - s390/raw3270: improve raw3270_init() readability (Thomas Huth) [RHEL-86670]
  - s390/tape: make tape_class constant (Thomas Huth) [RHEL-86670]
  - s390/vmlogrdr: make vmlogrdr_class constant (Thomas Huth) [RHEL-86670]
  - s390/vmur: make vmur_class constant (Thomas Huth) [RHEL-86670]
  - s390/zcrypt: make zcrypt_class constant (Thomas Huth) [RHEL-86670]
  - s390/vfio-ap: make matrix_bus const (Thomas Huth) [RHEL-86670]
  - s390/mm: provide simple ARCH_HAS_DEBUG_VIRTUAL support (Thomas Huth) [RHEL-86670]
  - s390/vfio_ccw_cp: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/tape: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/3270: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/raw3270: fix indentation/whitespace errors (Thomas Huth) [RHEL-86670]
  - s390/3215: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - tty: con3215: convert to u8 and size_t (Thomas Huth) [RHEL-86670]
  - s390/vmur: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/scm: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/cio,idal: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/cio,idal: remove superfluous virt_to_phys() conversion (Thomas Huth) [RHEL-86670]
  - s390/cio,idal: code cleanup (Thomas Huth) [RHEL-86670]
  - s390/dasd: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/dasd: remove superfluous virt_to_phys() conversion (Thomas Huth) [RHEL-86670]
  - s390/virtio_ccw: avoid converting dma addresses / handles (Thomas Huth) [RHEL-86670]
  - s390/virtio_ccw: use DMA handle from DMA API (Thomas Huth) [RHEL-86670]
  - s390/sysinfo: allow response buffer in normal memory (Thomas Huth) [RHEL-86670]
  - s390/tools: handle rela R_390_GOTPCDBL/R_390_GOTOFF64 (Thomas Huth) [RHEL-86670]
  - s390/cache: prevent rebuild of shared_cpu_list (Thomas Huth) [RHEL-86670]
  - s390/configs: increase number of LOCKDEP_BITS (Thomas Huth) [RHEL-86670]
  - s390/pai: change sampling event assignment for PMU device driver (Thomas Huth) [RHEL-86670]
  - s390/dasd_eckd: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/dcssblk: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/boot: fix minor comment style damages (Thomas Huth) [RHEL-86670]
  - s390/boot: do not check for zero-termination relocation entry (Thomas Huth) [RHEL-86670]
  - s390/boot: make type of __vmlinux_relocs_64_start|end consistent (Thomas Huth) [RHEL-86670]
  - s390/boot: sanitize kaslr_adjust_relocs() function prototype (Thomas Huth) [RHEL-86670]
  - s390/boot: simplify GOT handling (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: fix .got.plt assertion (Thomas Huth) [RHEL-86670]
  - dcssblk: handle alloc_dax() -EOPNOTSUPP failure (Thomas Huth) [RHEL-86670]
  - s390/pgtable: define PFN_PTE_SHIFT (Thomas Huth) [RHEL-86670]
  - s390/boot: workaround current 'llvm-objdump -t -j ...' behavior (Thomas Huth) [RHEL-86670]
  - s390: enable MHP_MEMMAP_ON_MEMORY (Thomas Huth) [RHEL-86670]
  - s390/mm: implement MEM_PREPARE_ONLINE/MEM_FINISH_OFFLINE notifiers (Thomas Huth) [RHEL-86670]
  - s390/sclp: remove unhandled memory notifier type (Thomas Huth) [RHEL-86670]
  - s390/mm: allocate vmemmap pages from self-contained memory range (Thomas Huth) [RHEL-86670]
  - mm/memory_hotplug: introduce MEM_PREPARE_ONLINE/MEM_FINISH_OFFLINE notifiers (Thomas Huth) [RHEL-86670]
  - s390/vdso/data: Drop unnecessary header include (Thomas Huth) [RHEL-86670]
  - s390: compile relocatable kernel without -fPIE (Thomas Huth) [RHEL-86670]
  - s390: add relocs tool (Thomas Huth) [RHEL-86670]
  - s390/vdso64: filter out munaligned-symbols flag for vdso (Thomas Huth) [RHEL-86670]
  - s390/boot: add 'alloc' to info.bin .vmlinux.info section flags (Thomas Huth) [RHEL-86670]
  - s390/pci: Fix potential double remove of hotplug slot (Thomas Huth) [RHEL-86670]
  - s390/pci: remove hotplug slot when releasing the device (Thomas Huth) [RHEL-86670]
  - s390/pci: introduce lock to synchronize state of zpci_dev's (Thomas Huth) [RHEL-86670]
  - s390/pci: rename lock member in struct zpci_dev (Thomas Huth) [RHEL-86670]
  - s390/pai: adjust whitespace indentation (Thomas Huth) [RHEL-86670]
  - s390/pai: simplify event start function for perf stat (Thomas Huth) [RHEL-86670]
  - s390/pai: save PAI counter value page in event structure (Thomas Huth) [RHEL-86670]
  - s390/crc32le: convert to C (Thomas Huth) [RHEL-86670]
  - s390/crc32be: convert to C (Thomas Huth) [RHEL-86670]
  - s390/fpu: add vector instruction inline assemblies for crc32 (Thomas Huth) [RHEL-86670]
  - s390/sysinfo: convert bogomips calculation to C (Thomas Huth) [RHEL-86670]
  - s390/raid6: convert to use standard fpu_*() inline assemblies (Thomas Huth) [RHEL-86670]
  - s390/checksum: provide csum_partial_copy_nocheck() (Thomas Huth) [RHEL-86670]
  - s390/checksum: provide vector register variant of csum_partial() (Thomas Huth) [RHEL-86670]
  - s390/checksum: provide and use cksm() inline assembly (Thomas Huth) [RHEL-86670]
  - s390/checksum: call instrument_read() instead of kasan_check_read() (Thomas Huth) [RHEL-86670]
  - s390/nmi: remove register validation code (Thomas Huth) [RHEL-86670]
  - s390/setup: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390: don't allow CONFIG_COMPAT with LD=ld.lld (Thomas Huth) [RHEL-86670]
  - s390/vdso: remove unused ENTRY in linker scripts (Thomas Huth) [RHEL-86670]
  - s390/bug: remove entry size from __bug_table section (Thomas Huth) [RHEL-86670]
  - s390: link vmlinux with '-z notext' (Thomas Huth) [RHEL-86670]
  - s390: select CONFIG_ARCH_WANT_LD_ORPHAN_WARN (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle commonly discarded sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle ELF required sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle DWARF debug sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle '.rela' sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle '.init.text' (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: explicitly keep various sections (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: explicitly handle '.got' and '.plt' sections (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: handle '.data.rel' sections explicitly (Thomas Huth) [RHEL-86670]
  - s390/boot: add support for CONFIG_LD_ORPHAN_WARN (Thomas Huth) [RHEL-86670]
  - s390/dasd: fix double module refcount decrement (Thomas Huth) [RHEL-86670]
  - s390/dasd: Improve ERP error messages (Thomas Huth) [RHEL-86670]
  - s390/extmem: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/cio: make scm_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/cio: make ccw_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/cio: make css_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/ccwgroup: make ccwgroup_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/time: make stp_subsys const (Thomas Huth) [RHEL-86670]
  - s390/vdso: drop '-fPIC' from LDFLAGS (Thomas Huth) [RHEL-86670]
  - s390/cmf: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/cmf: remove unneeded DMA zone allocation (Thomas Huth) [RHEL-86670]
  - s390/cio: remove unneeded DMA zone allocation (Thomas Huth) [RHEL-86670]
  - s390/mmap: disable mmap alignment when randomize_va_space = 0 (Thomas Huth) [RHEL-86670]
  - s390/hypfs_sprp: remove unneeded DMA zone allocation (Thomas Huth) [RHEL-86670]
  - s390/diag: add missing virt_to_phys() translation to diag14() (Thomas Huth) [RHEL-86670]
  - s390/vmur: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/time: improve steering precision (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: return proper error code in paicrypt_init (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: emit error on too many counters (Thomas Huth) [RHEL-86670]
  - s390/hypfs_diag0c: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/hypfs_sprp: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/appldata: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/diag: fix diag26c() physical vs virtual address confusion (Thomas Huth) [RHEL-86670]
  - s390/configs: update default configurations (Thomas Huth) [RHEL-86670]
  - s390/configs: enable INIT_STACK_ALL_ZERO in all configurations (Thomas Huth) [RHEL-86670]
  - s390/configs: provide compat topic configuration target (Thomas Huth) [RHEL-86670]
  - s390/dasd: Use dev_*() for device log messages (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove PRINTK_HEADER and KMSG_COMPONENT definitions (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove %p format specifier from error messages (Thomas Huth) [RHEL-86670]
  - s390/dasd: Use dev_err() over printk() (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove unused message logging macros (Thomas Huth) [RHEL-86670]
  - s390/dasd: Move allocation error message to DBF (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove unnecessary errorstring generation (Thomas Huth) [RHEL-86670]
  - s390/dasd: Use sysfs_emit() over sprintf() (Thomas Huth) [RHEL-86670]
  - s390/dasd: Simplify uid string generation (Thomas Huth) [RHEL-86670]
  - s390/pai_ext: split function paiext_push_sample (Thomas Huth) [RHEL-86670]
  - s390/pai_ext: rework function paiext_copy argments (Thomas Huth) [RHEL-86670]
  - s390/pai: rework paiXXX_start and paiXXX_stop functions (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: split function paicrypt_push_sample (Thomas Huth) [RHEL-86670]
  - s390/pai: rework paixxxx_getctr interface (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: remove not needed tsk variable (Thomas Huth) [RHEL-86670]
  - s390/pci: fix max size calculation in zpci_memcpy_toio() (Thomas Huth) [RHEL-86670]
  - s390/compat: change default for CONFIG_COMPAT to "n" (Thomas Huth) [RHEL-86670]
  - s390/cio: make sch->lock spinlock pointer a member (Thomas Huth) [RHEL-86670]
  - s390/nmi: implement and use local_mcck_save() / local_mcck_restore() (Thomas Huth) [RHEL-86670]
  - s390/nmi: consistently enable machine checks in trap_init() (Thomas Huth) [RHEL-86670]
  - s390/ctlreg: return old register contents when changing bits (Thomas Huth) [RHEL-86670]
  - s390/traps: only define is_valid_bugaddr() under CONFIG_GENERIC_BUG (Thomas Huth) [RHEL-86670]
  - s390/dasd: remove dasd_stats_generic_show() (Thomas Huth) [RHEL-86670]
  - tty: con3215: drop raw3215_info::ubuffer (Thomas Huth) [RHEL-86670]
  - s390/uvdevice: Report additional-data length for attestation (Thomas Huth) [RHEL-86670]
  - s390/boot: always align vmalloc area on segment boundary (Thomas Huth) [RHEL-86670]
  - s390/sysinfo: add variable capacity information (Thomas Huth) [RHEL-86670]
  - s390/mm: make pte_free_tlb() similar to pXd_free_tlb() (Thomas Huth) [RHEL-86670]
  - s390/mm: use compound page order to distinguish page tables (Thomas Huth) [RHEL-86670]
  - s390/mm: use full 4KB page for 2KB PTE (Thomas Huth) [RHEL-86670]
  - s390/mm: add missing conversion to use ptdescs (Thomas Huth) [RHEL-86670]
  - s390/cmma: rework no-dat handling (Thomas Huth) [RHEL-86670]
  - s390/cmma: move arch_set_page_dat() to header file (Thomas Huth) [RHEL-86670]
  - s390/pai: cleanup event initialization (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: remove per-cpu variable assignement in event initialization (Thomas Huth) [RHEL-86670]
  - s390/pai: initialize event count once at initialization (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: use PERF_ATTACH_TASK define for per task detection (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: dynamically allocate percpu pai crypto map data structure (Thomas Huth) [RHEL-86670]
  - dm mpath: replace spin_lock_irqsave with spin_lock_irq (Benjamin Marzinski) [RHEL-89480]
  - dm-mpath: Don't grab work_mutex while probing paths (Benjamin Marzinski) [RHEL-89480]
  - dm mpath: Interface for explicit probing of active paths (Benjamin Marzinski) [RHEL-89480]
  - dm: Allow .prepare_ioctl to handle ioctls directly (Benjamin Marzinski) [RHEL-89480]
  - rv: Update RHEL kconfigs for 6.15 upstream code (Gabriele Monaco) [RHEL-92623]
  - rv: Fix out-of-bound memory access in rv_is_container_monitor() (Gabriele Monaco) [RHEL-92623]
  - rv: Fix missing unlock on double nested monitors return path (Gabriele Monaco) [RHEL-92623]
  - handle man-page for rv-mon-sched in redhat/kernel.spec.template (Gabriele Monaco) [RHEL-92623]
  - Documentation/rv: Add sched pages to the indices (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Allow rv list to filter for container (Gabriele Monaco) [RHEL-92623]
  - Documentation/rv: Add docs for the sched monitors (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Add support for nested monitors (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Add support for nested monitors (Gabriele Monaco) [RHEL-92623]
  - rv: Add scpd, snep and sncid per-cpu monitors (Gabriele Monaco) [RHEL-92623]
  - rv: Add snroc per-task monitor (Gabriele Monaco) [RHEL-92623]
  - rv: Add sco and tss per-cpu monitors (Gabriele Monaco) [RHEL-92623]
  - rv: Add option for nested monitors and include sched (Gabriele Monaco) [RHEL-92623]
  - sched: Add sched tracepoints for RV task model (Gabriele Monaco) [RHEL-92623]
  - rv: Add license identifiers to monitor files (Gabriele Monaco) [RHEL-92623]
  - tracing: Fix DECLARE_TRACE_CONDITION (Gabriele Monaco) [RHEL-92623]
  - rv: Reset per-task monitors also for idle tasks (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Implement event type detection (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Auto patch current kernel source (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92623]
  - rv: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Add support for name and description options (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: More robust template variables (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Unify main.c templates (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Fix template directory detection (Gabriele Monaco) [RHEL-92623]
  - Documentation/rv: Fix typos (Gabriele Monaco) [RHEL-92623]
  - verification/dot2: Improve dot parser robustness (Gabriele Monaco) [RHEL-92623]
  - rv: Fix a typo (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92623]
  - Documentation/tools/rv: fix document header (Gabriele Monaco) [RHEL-92623]
  - rv: Update rv_en(dis)able_monitor doc to match kernel-doc (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Delete duplicate imports (Gabriele Monaco) [RHEL-92623]
  - rv: Set variable 'da_mon_##name' to static (Gabriele Monaco) [RHEL-92623]
  - tmpfs,xattr: enable limited user extended attributes (Ian Kent) [RHEL-65718]
  - KVM: VMX: Use separate subclasses for PI wakeup lock to squash false positive (Maxim Levitsky) [RHEL-86152]
  - KVM: VMX: Assert that IRQs are disabled when putting vCPU on PI wakeup list (Maxim Levitsky) [RHEL-86152]
  - tracing/osnoise: Allow arbitrarily long CPU string (Tomas Glozar) [RHEL-94317]
  - selftests/bpf: Fix freplace_link segfault in tailcalls prog test (Viktor Malik) [RHEL-85485]
  - bpf: Add tracepoints with null-able arguments (Viktor Malik) [RHEL-85485]
  - bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP (Viktor Malik) [RHEL-85485]
  - bpf: Avoid deadlock caused by nested kprobe and fentry bpf programs (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add tests for raw_tp NULL args (Viktor Malik) [RHEL-85485]
  - bpf: Augment raw_tp arguments with PTR_MAYBE_NULL (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add test for narrow ctx load for pointer args (Viktor Malik) [RHEL-85485]
  - bpf: Check size for BTF-based ctx access of pointer members (Viktor Malik) [RHEL-85485]
  - bpf: Fix theoretical prog_array UAF in __uprobe_perf_func() (Viktor Malik) [RHEL-85485]
  - bpf: fix potential error return (Viktor Malik) [RHEL-85485]
  - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (Viktor Malik) [RHEL-75889 RHEL-85485] {CVE-2024-56675}
  - selftests/bpf: Add more test cases for LPM trie (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Move test_lpm_map.c to map_tests (Viktor Malik) [RHEL-85485]
  - bpf: Use raw_spinlock_t for LPM trie (Viktor Malik) [RHEL-85485]
  - bpf: Switch to bpf mem allocator for LPM trie (Viktor Malik) [RHEL-85485]
  - bpf: Fix exact match conditions in trie_get_next_key() (Viktor Malik) [RHEL-85485]
  - bpf: Handle in-place update for full LPM trie correctly (Viktor Malik) [RHEL-85485]
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Viktor Malik) [RHEL-85485]
  - bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem (Viktor Malik) [RHEL-85485]
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots (Viktor Malik) [RHEL-85485]
  - bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add tests for iter arg check (Viktor Malik) [RHEL-85485]
  - bpf: Ensure reg is PTR_TO_STACK in process_iter_arg (Viktor Malik) [RHEL-85485]
  - bpftool: fix potential NULL pointer dereferencing in prog_dump() (Viktor Malik) [RHEL-85485]
  - bpf: Add kernel symbol for struct_ops trampoline (Viktor Malik) [RHEL-85485]
  - bpf: Use function pointers count as struct_ops links count (Viktor Malik) [RHEL-85485]
  - bpf: Call free_htab_elem() after htab_unlock_bucket() (Viktor Malik) [RHEL-85485 RHEL-89790]
  - bpf: Force uprobe bpf program to always return 0 (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add tests for raw_tp null handling (Viktor Malik) [RHEL-85485]
  - bpf, bpftool: Fix incorrect disasm pc (Viktor Malik) [RHEL-85485]
  - bpf: put bpf_link's program when link is safe to be deallocated (Viktor Malik) [RHEL-78741 RHEL-85485] {CVE-2024-56786}
  - bpf, arm64: Remove garbage frame for struct_ops trampoline (Viktor Malik) [RHEL-85485]
  - selftests/bpf: validate generic bpf_object and subskel APIs work together (Viktor Malik) [RHEL-85485]
  - libbpf: move global data mmap()'ing into bpf_object__load() (Viktor Malik) [RHEL-85485]
  - selftests/bpf: fix test_spin_lock_fail.c's global vars usage (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add test to verify tailcall and freplace restrictions (Viktor Malik) [RHEL-85485]
  - bpf: Prevent tailcall infinite loop caused by freplace (Viktor Malik) [RHEL-85485]
  - libbpf: never interpret subprogs in .text as entry programs (Viktor Malik) [RHEL-85485]
  - libbpf: fix sym_is_subprog() logic for weak global subprogs (Viktor Malik) [RHEL-85485]
  - libbpf: Fix output .symtab byte-order during linking (Viktor Malik) [RHEL-85485]
  - libbpf: Fix expected_attach_type set handling in program load callback (Viktor Malik) [RHEL-85485]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-596.el9]
changelog:
  - x86/entry: Add __init to ia32_emulation_override_cmdline() (Michael Petlan) [RHEL-52969]
  - selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size (Felix Maurer) [RHEL-83553]
  - selftests/bpf: Add launch time request to xdp_hw_metadata (Felix Maurer) [RHEL-83553]
  - selftests/bpf: xdp_hw_metadata reduce sleep interval (Felix Maurer) [RHEL-83553]
  - xsk: Add launch time hardware offload support to XDP Tx metadata (Felix Maurer) [RHEL-83553]
  - ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-83543]
  - ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-83543]
  - ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-83543]
  - ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-83543]
  - ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-83543]
  - ice: fix vf->num_mac count with port representors (Petr Oros) [RHEL-83543]
  - ice: use DSN instead of PCI BDF for ice_adapter index (Petr Oros) [RHEL-83543]
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-83543]
  - ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-83543]
  - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-83543]
  - ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-83543]
  - ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-83543]
  - ice: stop truncating queue ids when checking (Petr Oros) [RHEL-83543]
  - virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-83543]
  - ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-83543]
  - ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-83543]
  - ice: E825C PHY register cleanup (Petr Oros) [RHEL-83543]
  - ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-83543]
  - ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-83543]
  - ice: Add E830 checksum offload support (Petr Oros) [RHEL-83543]
  - ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-83543]
  - ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-83543]
  - ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-83543]
  - ice: do not configure destination override for switchdev (Petr Oros) [RHEL-83543]
  - ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-83543]
  - ice: Avoid setting default Rx VSI twice in switchdev setup (Petr Oros) [RHEL-83543]
  - virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-83543]
  - ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-83543]
  - virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-83543]
  - ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-83543]
  - ice: use generic unrolled_count() macro (Petr Oros) [RHEL-83543]
  - ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-83543]
  - ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-83543]
  - ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-83543]
  - ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-83543]
  - ice: support FW Recovery Mode (Petr Oros) [RHEL-83543]
  - ice: use string choice helpers (Petr Oros) [RHEL-83543]
  - ice: add fw and port health reporters (Petr Oros) [RHEL-83543]
  - ice: add recipe priority check in search (Petr Oros) [RHEL-83543]
  - ice: Add MDD logging via devlink health (Petr Oros) [RHEL-83543]
  - ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-83543]
  - ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-83543]
  - ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-83543]
  - ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-83543]
  - ice: reduce size of queue context fields (Petr Oros) [RHEL-83543]
  - ice: use <linux/packing.h> for Tx and Rx queue context data (Petr Oros) [RHEL-83543]
  - ice: use structures to keep track of queue context size (Petr Oros) [RHEL-83543]
  - ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-83543]
  - ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-83543]
  - ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-83543]
  - ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-83543]
  - ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-83543]
  - ice: Unbind the workqueue (Petr Oros) [RHEL-83543]
  - ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-83543]
  - ice: initialize pf->supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-83543]
  - ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-83543]
  - ice: Add support for persistent NAPI config (Petr Oros) [RHEL-83543]
  - ice: support optional flags in signature segment header (Petr Oros) [RHEL-83543]
  - ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-83543]
  - ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-83543]
  - ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-83543]
  - ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-83543]
  - virtchnl: fix m68k build. (Petr Oros) [RHEL-83543]
  - virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-83543]
  - ice: Cleanup unused declarations (Petr Oros) [RHEL-83543]
  - ice: Use common error handling code in two functions (Petr Oros) [RHEL-83543]
  - ice: Make use of assign_bit() API (Petr Oros) [RHEL-83543]
  - ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-83543]
  - ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-83543]
  - ice: Implement ethtool reset support (Petr Oros) [RHEL-83543]
  - crypto: qat - switch to standard pattern for PCI IDs (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove BITS_IN_DWORD() (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove initialization in device class (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add shutdown handler to qat_c3xxx (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove redundant prototypes in qat_c3xxx (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add shutdown handler to qat_c62x (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove redundant prototypes in qat_c62x (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add shutdown handler to qat_dh895xcc (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove redundant prototypes in qat_dh895xcc (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add shutdown handler to qat_420xx (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add shutdown handler to qat_4xxx (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove access to parity register for QAT GEN4 (Vladis Dronov) [RHEL-72769]
  - crypto: qat - set parity error mask for qat_420xx (Vladis Dronov) [RHEL-72769]
  - crypto: qat - optimize allocations for fw authentication (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove redundant FW image size check (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove unused members in suof structure (Vladis Dronov) [RHEL-72769]
  - crypto: qat - introduce fuse array (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add macro to write 64-bit values to registers (Vladis Dronov) [RHEL-72769]
  - crypto: qat - refactor service parsing logic (Vladis Dronov) [RHEL-72769]
  - crypto: qat - do not export adf_cfg_services (Vladis Dronov) [RHEL-72769]
  - crypto: qat - reorder objects in qat_common Makefile (Vladis Dronov) [RHEL-72769]
  - crypto: qat - fix object goals in Makefiles (Vladis Dronov) [RHEL-72769]
  - crypto: qat - set command ids as reserved (Vladis Dronov) [RHEL-72769]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-72769]
  - crypto: qat - replace deprecated PCI functions (Vladis Dronov) [RHEL-72769]
  - lib/string_choices: Rearrange functions in sorted order (Vladis Dronov) [RHEL-72769]
  - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93133] {CVE-2025-22004}
  - PCI/MSI: Remove over-zealous hardware size check in pci_msix_validate_entries() (John W. Linville) [RHEL-89170]
  - scsi: smartpqi: Delete a stray tab in pqi_is_parity_write_stream() (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Update driver version to 2.1.34-035 (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Enhance WWID logging logic (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Add new PCI IDs (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Take drives offline when controller is offline (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Use is_kdump_kernel() to check for kdump (Don Brace) [RHEL-96280]
  - redhat/configs: Enable CONFIG_PCIE_TPH (Ivan Vecera) [RHEL-94976]
  - PCI/TPH: Restore TPH Requester Enable correctly (Ivan Vecera) [RHEL-94976]
  - PCI/TPH: Add TPH documentation (Ivan Vecera) [RHEL-94976]
  - PCI/TPH: Add Steering Tag support (Ivan Vecera) [RHEL-94976]
  - PCI: Add TLP Processing Hints (TPH) support (Ivan Vecera) [RHEL-94976]
  - net: ena: Support persistent per-NAPI config. (Dennis Chen) [RHEL-94832]
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-94832]
  - net: ena: Fix incorrect indentation (Dennis Chen) [RHEL-94832]
  - net: ena: remove devm from ethtool (Dennis Chen) [RHEL-94832]
  - net: ena: Remove deadcode (Dennis Chen) [RHEL-94832]
  - net: ena: Remove autopolling mode (Dennis Chen) [RHEL-94832]
  - ena: Link queues to NAPIs (Dennis Chen) [RHEL-94832]
  - ena: Link IRQs to NAPI instances (Dennis Chen) [RHEL-94832]
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long) [RHEL-87008]
  - ovl: remove unused forward declaration (Miklos Szeredi) [RHEL-83562]
  - ovl: don't allow datadir only (Miklos Szeredi) [RHEL-83562]
  - ovl: fail if trusted xattrs are needed but caller lacks permission (Miklos Szeredi) [RHEL-83562]
  - ovl: properly handle large files in ovl_security_fileattr (Miklos Szeredi) [RHEL-83562]
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (Miklos Szeredi) [RHEL-83562]
  - ovl: ovl_parse_param_lowerdir: Add missed '\n' for pr_err (Miklos Szeredi) [RHEL-83562]
  - ima: detect changes to the backing overlay file (Miklos Szeredi) [RHEL-83562]
  - ovl: support encoding fid from inode with no alias (Miklos Szeredi) [RHEL-83562] {CVE-2025-21654}
  - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry (Miklos Szeredi) [RHEL-83562]
  - ovl: fix encoding fid for lower only root (Miklos Szeredi) [RHEL-83562]
  - ovl: fix wrong lowerdir number check for parameter Opt_lowerdir (Miklos Szeredi) [RHEL-83562]
  - ovl: pass string to ovl_parse_layer() (Miklos Szeredi) [RHEL-83562]
  - ovl: fix dentry reference leak after changes to underlying layers (Miklos Szeredi) [RHEL-83562]
  - ovl: fix memory leak in ovl_parse_param() (Miklos Szeredi) [RHEL-83562]
  - ovl: fix misformatted comment (Miklos Szeredi) [RHEL-83562]
  - ovl: add support for appending lowerdirs one by one (Miklos Szeredi) [RHEL-83562]
  - ovl: refactor layer parsing helpers (Miklos Szeredi) [RHEL-83562]
  - ovl: store and show the user provided lowerdir mount option (Miklos Szeredi) [RHEL-83562]
  - ovl: remove unused code in lowerdir param parsing (Miklos Szeredi) [RHEL-83562]
  - ovl: do not encode lower fh with upper sb_writers held (Miklos Szeredi) [RHEL-83562]
  - ovl: do not open/llseek lower file with upper sb_writers held (Miklos Szeredi) [RHEL-83562]
  - ovl: reorder ovl_want_write() after ovl_inode_lock() (Miklos Szeredi) [RHEL-83562]
  - ovl: split ovl_want_write() into two helpers (Miklos Szeredi) [RHEL-83562]
  - fs: export mnt_{get,put}_write_access() to modules (Miklos Szeredi) [RHEL-83562]
  - ovl: add helper ovl_file_modified() (Miklos Szeredi) [RHEL-83562]
  - ovl: protect copying of realinode attributes to ovl inode (Miklos Szeredi) [RHEL-83562]
  - ovl: punt write aio completion to workqueue (Miklos Szeredi) [RHEL-83562]
  - ovl: propagate IOCB_APPEND flag on writes to realfile (Miklos Szeredi) [RHEL-83562]
  - ovl: use simpler function to convert iocb to rw flags (Miklos Szeredi) [RHEL-83562]
  - ovl: rely on SB_I_NOUMASK (Miklos Szeredi) [RHEL-83562]
  - ovl: temporarily disable appending lowedirs (Miklos Szeredi) [RHEL-83562]
  - ovl: fix regression in showing lowerdir mount option (Miklos Szeredi) [RHEL-83562]
  - ovl: fix regression in parsing of mount options with escaped comma (Miklos Szeredi) [RHEL-83562]
  - fs: factor out vfs_parse_monolithic_sep() helper (Miklos Szeredi) [RHEL-83562]
  - overlayfs: move xattr tables to .rodata (Miklos Szeredi) [RHEL-83562]
  - ovl: fix NULL pointer defer when encoding non-decodable lower fid (Miklos Szeredi) [RHEL-83562]
  - ovl: make use of ->layers safe in rcu pathwalk (Miklos Szeredi) [RHEL-83562]
  - ovl: fix file reference leak when submitting aio (Miklos Szeredi) [RHEL-83562]
  - overlayfs: set ctime when setting mtime and atime (Miklos Szeredi) [RHEL-83562]
  - ovl: fix incorrect fdput() on aio completion (Miklos Szeredi) [RHEL-83562]
  - ovl: use kiocb_{start,end}_write() helpers (Miklos Szeredi) [RHEL-83562]
  - ovl: make consistent use of OVL_FS() (Miklos Szeredi) [RHEL-83562]
  - ovl: auto generate uuid for new overlay filesystems (Miklos Szeredi) [RHEL-83562]
  - ovl: store persistent uuid/fsid with uuid=on (Miklos Szeredi) [RHEL-83562]
  - ovl: Handle verity during copy-up (Miklos Szeredi) [RHEL-83562]
  - ovl: Validate verity xattr when resolving lowerdata (Miklos Szeredi) [RHEL-83562]
  - ovl: Add framework for verity support (Miklos Szeredi) [RHEL-83562]
  - ovl: add support for unique fsid per instance (Miklos Szeredi) [RHEL-83562]
  - ovl: support encoding non-decodable file handles (Miklos Szeredi) [RHEL-83562]
  - ovl: Always reevaluate the file signature for IMA (Miklos Szeredi) [RHEL-83562]
  - overlayfs: convert to ctime accessor functions (Miklos Szeredi) [RHEL-83562]
  - ovl: move all parameter handling into params.{c,h} (Miklos Szeredi) [RHEL-83562]
  - ovl: reserve ability to reconfigure mount options with new mount api (Miklos Szeredi) [RHEL-83562]
  - ovl: modify layer parameter parsing (Miklos Szeredi) [RHEL-83562]
  - ovl: port to new mount api (Miklos Szeredi) [RHEL-83562]
  - ovl: factor out ovl_parse_options() helper (Miklos Szeredi) [RHEL-83562]
  - ovl: store enum redirect_mode in config instead of a string (Miklos Szeredi) [RHEL-83562]
  - ovl: pass ovl_fs to xino helpers (Miklos Szeredi) [RHEL-83562]
  - ovl: clarify ovl_get_root() semantics (Miklos Szeredi) [RHEL-83562]
  - ovl: negate the ofs->share_whiteout boolean (Miklos Szeredi) [RHEL-83562]
  - ovl: check type and offset of struct vfsmount in ovl_entry (Miklos Szeredi) [RHEL-83562]
  - overlayfs: Implement splice-read (Miklos Szeredi) [RHEL-83562]
  - ovl: check for ->listxattr() support (Miklos Szeredi) [RHEL-83562]
  - ovl: Kconfig: Fix spelling mistake "undelying" -> "underlying" (Miklos Szeredi) [RHEL-83562]
  - ovl: use inode instead of dentry where possible (Miklos Szeredi) [RHEL-83562]
  - ovl: Add comment on upperredirect reassignment (Miklos Szeredi) [RHEL-83562]
  - ovl: use plain list filler in indexdir and workdir cleanup (Miklos Szeredi) [RHEL-83562]
  - ovl: do not reconnect upper index records in ovl_indexdir_cleanup() (Miklos Szeredi) [RHEL-83562]
  - ovl: fix comment typos (Miklos Szeredi) [RHEL-83562]
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link() (Miklos Szeredi) [RHEL-83562]
  - ovl: Use "buf" flexible array for memcpy() destination (Miklos Szeredi) [RHEL-83562]
  - ovl: fix spelling mistakes (Miklos Szeredi) [RHEL-83562]
  - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() (Miklos Szeredi) [RHEL-83562]
  - ovl: fix some kernel-doc comments (Miklos Szeredi) [RHEL-83562]
  - ovl: warn if trusted xattr creation fails (Miklos Szeredi) [RHEL-83562]
  - ovl: use kvalloc in xattr copy-up (Miklos Szeredi) [RHEL-83562]
  - ovl: skip checking lower file's i_writecount on truncate (Miklos Szeredi) [RHEL-83562]
  - ovl: relax lookup error on mismatch origin ftype (Miklos Szeredi) [RHEL-83562]
  - Revert "ovl: Add framework for verity support" (Miklos Szeredi) [RHEL-83562]
  - Revert "ovl: Validate verity xattr when resolving lowerdata" (Miklos Szeredi) [RHEL-83562]
  - Revert "ovl: Handle verity during copy-up" (Miklos Szeredi) [RHEL-83562]
  - emulex/benet: correct command version selection in be_cmd_get_stats() (Dennis Chen) [RHEL-72658]
  - emulex/benet: Annotate flash_cookie as nonstring (Dennis Chen) [RHEL-72658]
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Dennis Chen) [RHEL-72658]
  - be2net: fix potential memory leak in be_xmit() (Dennis Chen) [RHEL-72658]
  - be2net: Remove unused declarations (Dennis Chen) [RHEL-72658]
  - benet: fix return value check in be_lancer_xmit_workarounds() (Dennis Chen) [RHEL-72658]
  - be2net: Extend xmit workaround to BE3 chip (Dennis Chen) [RHEL-72658]
  - emulex/benet: clean up some inconsistent indenting (Dennis Chen) [RHEL-72658]
  - ethernet/emulex:fix repeated words in comments (Dennis Chen) [RHEL-72658]
  - scsi: storvsc: Explicitly set max_segment_size to UINT_MAX (Ewan D. Milne) [RHEL-96744]
  - Revert "PCI: Wait for device readiness with Configuration RRS" (John W. Linville) [RHEL-90580]
  - Revert "PCI: Rename CRS Completion Status to RRS" (John W. Linville) [RHEL-90580]
  - xen/events: replace evtchn_rwlock with RCU (Frank Liang) [RHEL-91670]
  - platform/x86: ISST: Correct command storage data length (David Arcari) [RHEL-88232]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-597.el9]
changelog:
  - perf/x86/intel: Fix crash in icl_update_topdown_event() (Michael Petlan) [RHEL-47444]
  - perf/x86/intel: Check the X86 leader for pebs_counter_event_group (Michael Petlan) [RHEL-47444]
  - perf/x86/intel/ds: Fix counter backwards of non-precise events counters-snapshotting (Michael Petlan) [RHEL-47444]
  - perf/x86/intel: Only check the group flag for X86 leader (Michael Petlan) [RHEL-47444]
  - perf/x86/intel: Support PEBS counters snapshotting (Michael Petlan) [RHEL-47444]
  - perf/x86/intel/ds: Simplify the PEBS records processing for adaptive PEBS (Michael Petlan) [RHEL-47444]
  - perf/x86/intel/ds: Factor out functions for PEBS records processing (Michael Petlan) [RHEL-47444]
  - perf/x86/intel/ds: Clarify adaptive PEBS processing (Michael Petlan) [RHEL-47444]
  - perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG (Michael Petlan) [RHEL-47444]
  - perf/x86/intel/ds: Add PEBS format 6 (Michael Petlan) [RHEL-47444]
  - perf/x86/intel: Apply static call for drain_pebs (Michael Petlan) [RHEL-47444]
  - perf: Avoid the read if the count is already updated (Michael Petlan) [RHEL-47444]
  - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read (Michael Petlan) [RHEL-47444]
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (CKI Backport Bot) [RHEL-97108] {CVE-2025-37799}
  - mm/huge_memory: fix dereferencing invalid pmd migration entry (Rafael Aquini) [RHEL-96372] {CVE-2025-37958}
  - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-94952]
  - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-94952]
  - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-94952]
  - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-94952]
  - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-94952]
  - usb: typec: thunderbolt: Fix loops that iterate TYPEC_PLUG_SOP_P and TYPEC_PLUG_SOP_PP (Desnes Nunes) [RHEL-78837]
  - usb: typec: thunderbolt: Remove IS_ERR check for plug (Desnes Nunes) [RHEL-78837]
  - usb: typec: tcpm: fix state transition for SNK_WAIT_CAPABILITIES state in run_state_machine() (Desnes Nunes) [RHEL-78837]
  - USB: serial: ftdi_sio: add support for Altera USB Blaster 3 (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Prevent use-after-free in resume from hibernate (Desnes Nunes) [RHEL-78837]
  - usb: typec: ucsi: Fix NULL pointer access (Desnes Nunes) [RHEL-78837] {CVE-2025-21918}
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Desnes Nunes) [RHEL-78837]
  - USB: serial: option: fix Telit Cinterion FE990A name (Desnes Nunes) [RHEL-78837]
  - USB: serial: option: add Telit Cinterion FE990B compositions (Desnes Nunes) [RHEL-78837]
  - USB: serial: option: match on interface class for Telit FN990B (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: Set SUSPENDENABLE soon after phy init (Desnes Nunes) [RHEL-78837]
  - usb: hub: lack of clearing xHC resources (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: gadget: Prevent irq storm when TH re-executes (Desnes Nunes) [RHEL-78837]
  - xhci: Restrict USB4 tunnel detection for USB3 devices to Intel hosts (Desnes Nunes) [RHEL-78837]
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" (Desnes Nunes) [RHEL-78837]
  - usb: xhci: Enable the TRB overfetch quirk on VIA VL805 (Desnes Nunes) [RHEL-78837]
  - usb: typec: ucsi: increase timeout for PPM reset operations (Desnes Nunes) [RHEL-78837]
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Desnes Nunes) [RHEL-78837] {CVE-2025-21916}
  - usb: typec: tcpm: PSSourceOffTimer timeout in PR_Swap enters ERROR_RECOVERY (Desnes Nunes) [RHEL-78837]
  - usb: roles: set switch registered flag early on (Desnes Nunes) [RHEL-78837]
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (Desnes Nunes) [RHEL-78837]
  - usb: gadget: core: flush gadget workqueue after device removal (Desnes Nunes) [RHEL-78837] {CVE-2025-21838}
  - usb: core: fix pipe creation for get_bMaxPacketSize0 (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state (Desnes Nunes) [RHEL-78837]
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (Desnes Nunes) [RHEL-78837]
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (Desnes Nunes) [RHEL-78837]
  - usb: cdc-acm: Fix handling of oversized fragments (Desnes Nunes) [RHEL-78837]
  - usb: cdc-acm: Check control transfer buffer size before access (Desnes Nunes) [RHEL-78837] {CVE-2025-21704}
  - usb: xhci: Restore xhci_pci support for Renesas HCs (Desnes Nunes) [RHEL-78837]
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Desnes Nunes) [RHEL-78837]
  - USB: serial: option: drop MeiG Smart defines (Desnes Nunes) [RHEL-78837]
  - USB: serial: option: fix Telit Cinterion FN990A name (Desnes Nunes) [RHEL-78837]
  - USB: serial: option: add Telit Cinterion FN990B compositions (Desnes Nunes) [RHEL-78837]
  - USB: serial: option: add MeiG Smart SLM828 (Desnes Nunes) [RHEL-78837]
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces (Desnes Nunes) [RHEL-78837] {CVE-2025-21776}
  - usb: dwc3: Document nostream_work (Desnes Nunes) [RHEL-78837]
  - usb: phy: generic: Use proper helper for property detection (Desnes Nunes) [RHEL-78837]
  - usb: hcd: Bump local buffer size in rh_string() (Desnes Nunes) [RHEL-78837]
  - usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS (Desnes Nunes) [RHEL-78837]
  - usb: xhci: tegra: Fix OF boolean read warning (Desnes Nunes) [RHEL-78837]
  - usb: host: xhci-plat: add support compatible ID PNP0D15 (Desnes Nunes) [RHEL-78837]
  - usb: typec: ucsi: Add a macro definition for UCSI v1.0 (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: core: Defer the probe until USB power supply ready (Desnes Nunes) [RHEL-78837]
  - usbip: Correct format specifier for seqnum from %d to %u (Desnes Nunes) [RHEL-78837]
  - usbip: Fix seqnum sign extension issue in vhci_tx_urb (Desnes Nunes) [RHEL-78837]
  - usb: quirks: Add NO_LPM quirk for TOSHIBA TransMemory-Mx device (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior (Desnes Nunes) [RHEL-78837]
  - USB: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-78837]
  - USB: typec: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-78837]
  - USB: host: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-78837]
  - USB: Replace own str_plural with common one (Desnes Nunes) [RHEL-78837]
  - xhci: don't mess with ->d_iname (Desnes Nunes) [RHEL-78837]
  - debugfs: Return error during {full/open}_proxy_open() on rmmod (Desnes Nunes) [RHEL-78837]
  - memstick: core: fix kernel-doc notation (Desnes Nunes) [RHEL-78837]
  - usb: phy: Remove API devm_usb_put_phy() (Desnes Nunes) [RHEL-78837]
  - Documentation: devres: add missing PHY helpers (Desnes Nunes) [RHEL-78837]
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (Desnes Nunes) [RHEL-78837]
  - usb: host: xhci-plat: Assign shared_hcd->rsrc_start (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: Skip resume if pm_runtime_set_active() fails (Desnes Nunes) [RHEL-78837]
  - dt-bindings: usb: Correct indentation and style in DTS example (Desnes Nunes) [RHEL-78837]
  - dt-bindings: usb: Add RZ/V2M USB3DRD binding (Desnes Nunes) [RHEL-78837]
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection (Desnes Nunes) [RHEL-78837]
  - USB: serial: ch341: use fix-width types consistently (Desnes Nunes) [RHEL-78837]
  - USB: serial: ch341: add hardware flow control RTS/CTS (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Expose router DROM through debugfs (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Handle DisplayPort tunnel activation asynchronously (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Rework tb_tunnel_consumed_bandwidth() (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Move forward declarations in one place (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Pass reason to tb_dp_resource_unavailable() (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Drop tb_tunnel_restart() (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Rework how tunnel->[init|deinit] hooks are called (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Show path name in debug log when path is deactivated (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Make tb_tunnel_one_dp() return void (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Increase DPRX capabilities read timeout (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Debug log an invalid config space reply just once (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Log config space when invalid config space reply is received (Desnes Nunes) [RHEL-78837]
  - thunderbolt: Drop doubled empty line from ctl.h (Desnes Nunes) [RHEL-78837]
  - thunderbolt: debugfs: Add write capability to path config space (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Add Kurokesu C1 PRO camera (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets (Desnes Nunes) [RHEL-78837]
  - media: Add common header file with JPEG marker definitions (Desnes Nunes) [RHEL-78837]
  - media: s5p-jpeg: rename JPEG marker constants to prevent build warnings (Desnes Nunes) [RHEL-78837]
  - USB: usbip: Update USB/IP OP_REP_IMPORT documentation. (Desnes Nunes) [RHEL-78837]
  - xhci: Add missing capability definition bits (Desnes Nunes) [RHEL-78837]
  - xhci: Add command completion parameter support (Desnes Nunes) [RHEL-78837]
  - xhci: dbgtty: Improve performance by handling received data immediately. (Desnes Nunes) [RHEL-78837]
  - xhci: dbc: Improve performance by removing delay in transfer event polling. (Desnes Nunes) [RHEL-78837]
  - phy: core: Simplify API of_phy_simple_xlate() implementation (Desnes Nunes) [RHEL-78837]
  - usb: typec: Print err when displayport fails to enter (Desnes Nunes) [RHEL-78837]
  - usb: typec: Make active on port altmode writable (Desnes Nunes) [RHEL-78837]
  - usb: typec: Add driver for Thunderbolt 3 Alternate Mode (Desnes Nunes) [RHEL-78837]
  - redhat/configs: Enable CONFIG_TYPEC_TBT_ALTMODE in RHEL (Desnes Nunes) [RHEL-78837]
  - usb: typec: Only use SVID for matching altmodes (Desnes Nunes) [RHEL-78837]
  - modpost: call module_alias_printf() from all do_*_entry() functions (Desnes Nunes) [RHEL-78837]
  - modpost: pass (struct module *) to do_*_entry() functions (Desnes Nunes) [RHEL-78837]
  - modpost: fix ishtp MODULE_DEVICE_TABLE built on big-endian host (Desnes Nunes) [RHEL-78837]
  - modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host (Desnes Nunes) [RHEL-78837]
  - modpost: introduce module_alias_printf() helper (Desnes Nunes) [RHEL-78837]
  - modpost: remove left-over cross_compile declaration (Desnes Nunes) [RHEL-78837]
  - modpost: remove unnecessary check in do_acpi_entry() (Desnes Nunes) [RHEL-78837]
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Desnes Nunes) [RHEL-78837]
  - modpost: fix acpi MODULE_DEVICE_TABLE built with mismatched endianness (Desnes Nunes) [RHEL-78837]
  - modpost: remove incorrect code in do_eisa_entry() (Desnes Nunes) [RHEL-78837]
  - kbuild: split x*alloc() functions in kconfig to scripts/include/xalloc.h (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: gadget: Fix incorrect UDC state after manual deconfiguration (Desnes Nunes) [RHEL-78837]
  - usbip: Accept arbitrarily long scatter-gather list (Desnes Nunes) [RHEL-78837]
  - usb: typec: tcpm: Add new AMS for Get_Revision response (Desnes Nunes) [RHEL-78837]
  - usb: typec: tcpm: Add support for parsing pd-revision DT property (Desnes Nunes) [RHEL-78837]
  - dt-bindings: connector: Add pd-revision property (Desnes Nunes) [RHEL-78837]
  - dt-bindings: usb: maxim,max33359: add usage of sink bc12 time property (Desnes Nunes) [RHEL-78837]
  - usb: typec: tcpci: set local CC to Rd only when cc1/cc2 status is Rp (Desnes Nunes) [RHEL-78837]
  - USB: usblp: remove redundant semicolon (Desnes Nunes) [RHEL-78837]
  - USB: Optimize goto logic in API usb_register_driver() (Desnes Nunes) [RHEL-78837]
  - usb: common: expand documentation for USB functions (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-78837] {CVE-2024-58002}
  - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Refactor frame parsing code into a uvc_parse_frame function (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Remove duplicated cap/out code (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Use uvc_query_name in uvc_get_video_ctrl (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Add more logging to uvc_query_ctrl() (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Support partial control reads (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events (Desnes Nunes) [RHEL-78837]
  - media: uvcvideo: Fix double free in error path (Desnes Nunes) [RHEL-78837] {CVE-2024-57980}
  - mmc: core: Drop the MMC_RSP_R1_NO_CRC response (Desnes Nunes) [RHEL-78837]
  - extcon: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Desnes Nunes) [RHEL-78837]
  - Documentation: extcon: add documentation for Extcon subsystem (Desnes Nunes) [RHEL-78837]
  - usb: storage: add a macro for the upper limit of max LUN (Desnes Nunes) [RHEL-78837]
  - USB: Fix the issue of task recovery failure caused by USB status when S4 wakes up (Desnes Nunes) [RHEL-78837]
  - usb: chipidea: host: Improve port index sanitizing (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: core: Disable USB2 retry for DWC_usb31 1.80a and prior (Desnes Nunes) [RHEL-78837]
  - dt-bindings: usb: qcom,dwc3: Add IPQ5424 to USB DWC3 bindings (Desnes Nunes) [RHEL-78837]
  - dt-bindings: usb: qcom,dwc3: Add QCS615 to USB DWC3 bindings (Desnes Nunes) [RHEL-78837]
  - dt-bindings: usb: qcom,dwc3: Make ss_phy_irq optional for X1E80100 (Desnes Nunes) [RHEL-78837]
  - dt-bindings: usb: qcom,dwc3: Add SAR2130P compatible (Desnes Nunes) [RHEL-78837]
  - dt-bindings: usb: qcom,dwc3: Add QCS8300 to USB DWC3 bindings (Desnes Nunes) [RHEL-78837]
  - usb: collapse USB_STORAGE Kconfig comment (Desnes Nunes) [RHEL-78837]
  - usb: gadget: functionfs: fix spellos (Desnes Nunes) [RHEL-78837]
  - usb: gadget: f_fs: add capability for dfu functional descriptor (Desnes Nunes) [RHEL-78837]
  - usb: gadget: ffs: remove ENTER() macro (Desnes Nunes) [RHEL-78837]
  - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Desnes Nunes) [RHEL-78837]
  - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Desnes Nunes) [RHEL-78837] {CVE-2022-49755}
  - usb: gadget: f_fs: use io_data->status consistently (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: remove unused sg struct member (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: gadget: fix writing NYET threshold (Desnes Nunes) [RHEL-78837]
  - USB: gadget: udc: core: make udc_class a static const structure (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: gadget: Remove dwc3_request->needs_extra_trb (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: gadget: Cleanup SG handling (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: gadget: Fix looping of queued SG entries (Desnes Nunes) [RHEL-78837] {CVE-2024-56698}
  - usb: dwc3: gadget: Fix checking for number of TRBs left (Desnes Nunes) [RHEL-78837]
  - usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED (Desnes Nunes) [RHEL-78837]
  - phy: tegra194: p2u: Allow to enable driver on Tegra234 (Desnes Nunes) [RHEL-78837]
  - Partially revert "module: Convert symbol namespace to string literal" (Robert Foss) [RHEL-75951]
  - accel: Disable accel/habanalabs (Robert Foss) [RHEL-75951]
  - drm: Use old __assign_str function definition (Robert Foss) [RHEL-75951]
  - Partially revert "treewide: const qualify ctl_tables where applicable" (Robert Foss) [RHEL-75951]
  - Partially revert "treewide: Introduce kthread_run_worker[_on_cpu]()" (Robert Foss) [RHEL-75951]
  - Revert "drm/xe: Implement cgroup for vram" (Robert Foss) [RHEL-75951]
  - Revert "drm/ttm: Handle cgroup based eviction in TTM" (Robert Foss) [RHEL-75951]
  - Revert "drm/drv: Add drmm managed registration helper for dmem cgroups." (Robert Foss) [RHEL-75951]
  - drm: remove driver date from struct drm_driver and all drivers (Robert Foss) [RHEL-75951]
  - drm/tidss: Run DRM default client setup (Robert Foss) [RHEL-75951]
  - redhat/configs: Add new configs from drm 6.14 backport (Robert Foss) [RHEL-75951]
  - Merge DRM changes from upstream v6.13..v6.14 (Robert Foss) [RHEL-75951]
  - Revert "drm: of: Get MEDIA_BUS_FMT_RGB101010_1X7X5_{JEIDA, SPWG} LVDS data mappings" (Robert Foss) [RHEL-75951]
  - Revert "drm: of: Add drm_of_lvds_get_dual_link_pixel_order_sink()" (Robert Foss) [RHEL-75951]
  - Partially revert "module: Convert symbol namespace to string literal" (Robert Foss) [RHEL-75951]
  - Partially revert "fs: port files to file_ref" (Robert Foss) [RHEL-75951]
  - Partially revert "sysfs: treewide: constify attribute callback of bin_is_visible()" (Robert Foss) [RHEL-75951]
  - Partially revert "introduce fd_file(), convert all accessors to it." (Robert Foss) [RHEL-75951]
  - Partially revert "fdget(), trivial conversions" (Robert Foss) [RHEL-75951]
  - drm/amdgpu: Removed duplicate function definition (Robert Foss) [RHEL-75951]
  - drm/dp_mst: Remove duplicate definition of update_msg_rx_state (Robert Foss) [RHEL-75951]
  - drm/intel: Fix i915_pciids.h being renamed to pciids.h (Robert Foss) [RHEL-75951]
  - drm/tegra: Use video aperture helpers (Robert Foss) [RHEL-75951]
  - Revert "drm/amd/display: use ARCH_HAS_KERNEL_FPU_SUPPORT" (Robert Foss) [RHEL-75951]
  - redhat/configs: Add new configs from drm 6.13 backport (Robert Foss) [RHEL-75951]
  - Partially revert "Get rid of 'remove_new' relic from platform driver struct" (Robert Foss) [RHEL-75951]
  - kconfig: Fix BACKLIGHT_CLASS_DEVICE circular dependency (Robert Foss) [RHEL-75951]
  - kconfig: Fix DRM_PANEL circular dependency (Robert Foss) [RHEL-75951]
  - kconfig: Fix HWMON circular dependency (Robert Foss) [RHEL-75951]
  - Merge DRM changes from upstream v6.12..v6.13 (Robert Foss) [RHEL-75951]
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98994] {CVE-2025-21991}
  - x86/topology: Introduce topology_logical_core_id() (Michael Petlan) [RHEL-23496]
  - perf/x86/rapl: Fix error handling in init_rapl_pmus() (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Fix the error checking order (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Add core energy counter support for AMD CPUs (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Move the cntr_mask to rapl_pmus struct (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Remove the global variable rapl_msrs (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Modify the generic variable names to *_pkg* (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Add arguments to the init and cleanup functions (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Make rapl_model struct global (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Rename rapl_pmu variables (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Remove the cpu_to_rapl_pmu() function (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Remove the unused get_rapl_pmu_cpumask() function (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Clean up cpumask and hotplug (Michael Petlan) [RHEL-52654]
  - perf/x86/rapl: Move the pmu allocation out of CPU hotplug (Michael Petlan) [RHEL-52654]
  - selftests: Warn about skipped tests in result summary (Waiman Long) [RHEL-93414]
  - selftests: ksft: Fix finished() helper exit code on skipped tests (Waiman Long) [RHEL-93414]
  - kselftest: Move ksft helper module to common directory (Waiman Long) [RHEL-93414]
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-93414]
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-93414] {CVE-2025-37963}
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-93414] {CVE-2025-37948}
  - arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-93414]
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-93414]
  - arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-93414]
  - redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-93414]
  - selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92180 RHEL-93414] {CVE-2024-28956}
  - x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92180 RHEL-93414] {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92180 RHEL-93414] {CVE-2024-28956}
  - x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92180 RHEL-93414] {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92180 RHEL-93414] {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92180 RHEL-93414] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92180 RHEL-93414] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92180 RHEL-93414] {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92180 RHEL-93414] {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92180 RHEL-93414] {CVE-2024-28956}
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Waiman Long) [RHEL-93414]
  - x86/bpf: Add IBHF call at end of classic BPF (Waiman Long) [RHEL-93414]
  - x86/bpf: Call branch history clearing sequence on exit (Waiman Long) [RHEL-93414]
  - x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-93414]
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-93414]
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-93414]
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-93414]
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-93414]
  - x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-93414]
  - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-93414]
  - x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-93414]
  - x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-93414]
  - x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-93414]
  - x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-93414]
  - x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-93414]
  - KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-93414]
  - x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-93414]
  - x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-93414]
  - x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-93414]
  - x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-93414]
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-93414]
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-93414]
  - x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-93414]
  - x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-93414]
  - x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-93414]
  - x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-93414]
  - x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-93414]
  - x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-93414]
  - x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-93414]
  - x86/entry: Have entry_ibpb() invalidate return predictions (Waiman Long) [RHEL-93414]
  - tools/include: Sync x86 headers with the kernel sources (Waiman Long) [RHEL-93414]
  - x86/platform/atom: Switch to new Intel CPU model defines (Waiman Long) [RHEL-93414]
  - cpufreq: Switch to new Intel CPU model defines (Waiman Long) [RHEL-93414]
  - EDAC/skx: Switch to new Intel CPU model defines (Waiman Long) [RHEL-93414]
  - EDAC/i10nm: Switch to new Intel CPU model defines (Waiman Long) [RHEL-93414]
  - x86/cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL (Waiman Long) [RHEL-93414]
  - x86/aperfmperf: Switch to new Intel CPU model defines (Waiman Long) [RHEL-93414]
  - x86/apic: Switch to new Intel CPU model defines (Waiman Long) [RHEL-93414]
  - EDAC/i10nm: Add Intel Grand Ridge micro-server support (Waiman Long) [RHEL-93414]
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk (CKI Backport Bot) [RHEL-72662]
  - redhat/configs: Enable CONFIG_AMPERE_ERRATUM_AC04_CPU_23 (Gavin Shan) [RHEL-93666]
  - KVM: arm64: VHE: Synchronize CPTR trap deactivation (Gavin Shan) [RHEL-93666]
  - KVM: arm64: VHE: Synchronize restore of host debug registers (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Explicitly treat routing entry type changes as changes (Gavin Shan) [RHEL-93666]
  - arm64: Add override for MPAM (Gavin Shan) [RHEL-93666]
  - KVM: arm64: vgic-init: Plug vCPU vs. VGIC creation race (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Unmap vLPIs affected by changes to GSI routing information (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Resolve vLPI by host IRQ in vgic_v4_unset_forwarding() (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Protect vLPI translation with vgic_irq::irq_lock (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Use lock guard in vgic_v4_set_forwarding() (Gavin Shan) [RHEL-93666]
  - arm64: sysreg: Drag linux/kconfig.h to work around vdso build issue (Gavin Shan) [RHEL-93666]
  - arm64: errata: Work around AmpereOne's erratum AC04_CPU_23 (Gavin Shan) [RHEL-93666]
  - KVM: selftests: Confirm exposing MTE_frac does not break migration (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Make MTE_frac masking conditional on MTE capability (Gavin Shan) [RHEL-93666]
  - arm64/sysreg: Expose MTE_frac so that it is visible to KVM (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Drop sort_memblock_regions() (Gavin Shan) [RHEL-93666]
  - KVM: arm64: selftest: Don't try to disable AArch64 support (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Prevent userspace from disabling AArch64 support at any virtualisable EL (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Force HCR_EL2.xMO to 1 at all times in VHE mode (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Let kvm_vcpu_read_pmcr() return an EL-dependent value for PMCR_EL0.N (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Handle out-of-bound write to MDCR_EL2.HPMN (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Don't let userspace write to PMCR_EL0.N when the vcpu has EL2 (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Allow userspace to limit the number of PMU counters for EL2 VMs (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Contextualise the handling of PMCR_EL0.P writes (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Fix MDCR_EL2.HPMN reset value (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Repaint pmcr_n into nr_pmu_counters (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Use acquire/release to communicate FF-A version negotiation (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Don't translate FAR if invalid/unsafe (Gavin Shan) [RHEL-93666]
  - arm64: Convert HPFAR_EL2 to sysreg table (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Only read HPFAR_EL2 when value is architecturally valid (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Tear down vGIC on failed vCPU creation (Gavin Shan) [RHEL-93666]
  - KVM: arm64: PMU: Reload when resetting (Gavin Shan) [RHEL-93666]
  - KVM: arm64: PMU: Reload when user modifies registers (Gavin Shan) [RHEL-93666]
  - KVM: arm64: PMU: Fix SET_ONE_REG for vPMC regs (Gavin Shan) [RHEL-93666]
  - KVM: arm64: PMU: Assume PMU presence in pmu-emul.c (Gavin Shan) [RHEL-93666]
  - KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Copy guest CTR_EL0 into hyp VM (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Document ordering requirements for irqbypass (Gavin Shan) [RHEL-93666]
  - KVM: arm64: vgic-v4: Fall back to software irqbypass if LPI not found (Gavin Shan) [RHEL-93666]
  - KVM: arm64: vgic-v4: Only WARN for HW IRQ mismatch when unmapping vLPI (Gavin Shan) [RHEL-93666]
  - KVM: arm64: vgic-v4: Only attempt vLPI mapping for actual MSIs (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Set HCR_EL2.TID1 unconditionally (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Only apply PMCR_EL0.P to the guest range of counters (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Use MDCR_EL2.HPME to evaluate overflow of hyp counters (Gavin Shan) [RHEL-93666]
  - KVM: arm64: selftests: Test ID_AA64PFR0.MPAM isn't completely ignored (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Fix missing traps of guest accesses to the MPAM registers (Gavin Shan) [RHEL-93666]
  - arm64: cpufeature: discover CPU support for MPAM (Gavin Shan) [RHEL-93666]
  - arm64: head.S: Initialise MPAM EL2 registers and disable traps (Gavin Shan) [RHEL-93666]
  - arm64/sysreg: Convert existing MPAM sysregs and add the remaining entries (Gavin Shan) [RHEL-93666]
  - KVM: arm64: nv: Reprogram PMU events affected by nested transition (Gavin Shan) [RHEL-93666]
  - KVM: arm64: nv: Apply EL2 event filtering when in hyp context (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Add helpers to determine if PMC counts at a given EL (Gavin Shan) [RHEL-93666]
  - KVM: arm64: nv: Adjust range of accessible PMCs according to HPMN (Gavin Shan) [RHEL-93666]
  - KVM: arm64: Rename kvm_pmu_valid_counter_mask() (Gavin Shan) [RHEL-93666]
  - KVM: arm64: nv: Describe trap behaviour of MDCR_EL2.HPMN (Gavin Shan) [RHEL-93666]
  - KVM: arm64: nv: Rename BEHAVE_FORWARD_ANY (Gavin Shan) [RHEL-93666]
  - KVM: arm64: nv: Allow coarse-grained trap combos to use complex traps (Gavin Shan) [RHEL-93666]
  - arm64: Fix usage of new shifted MDCR_EL2 values (Gavin Shan) [RHEL-93666]
  - arm64: sysreg: Migrate MDCR_EL2 definition to table (Gavin Shan) [RHEL-93666]
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Gavin Shan) [RHEL-93666]
  - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (Gavin Shan) [RHEL-93666]
  - scsi: lpfc: Create lpfc_vmid_info sysfs entry (Dick Kennedy) [RHEL-89476]
  - scsi: lpfc: Restart eratt_poll timer if HBA_SETUP flag still unset (Dick Kennedy) [RHEL-89476]
  - scsi: lpfc: Copyright updates for 14.4.0.9 patches (Dick Kennedy) [RHEL-89476]
  - scsi: lpfc: Update lpfc version to 14.4.0.9 (Dick Kennedy) [RHEL-89476]
  - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Dick Kennedy) [RHEL-89476]
  - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Dick Kennedy) [RHEL-89476]
  - scsi: lpfc: Notify FC transport of rport disappearance during PCI fcn reset (Dick Kennedy) [RHEL-89476]
  - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Dick Kennedy) [RHEL-89476]
  - scsi: lpfc: Use memcpy() for BIOS version (Dick Kennedy) [RHEL-89476]
  - scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag (Dick Kennedy) [RHEL-89476]
  - smb: client: fix perf regression with deferred closes (Paulo Alcantara) [RHEL-92919]
  - smb3 client: fix open hardlink on deferred close file error (Paulo Alcantara) [RHEL-92919]
  - loop: add file_start_write() and file_end_write() (Ming Lei) [RHEL-90207]
  - loop: don't require ->write_iter for writable files in loop_configure (Ming Lei) [RHEL-90207]
  - loop: Add sanity check for read/write_iter (Ming Lei) [RHEL-90207]
  - loop: stop using vfs_iter_{read,write} for buffered I/O (Ming Lei) [RHEL-90207]
  - loop: aio inherit the ioprio of original request (Ming Lei) [RHEL-90207]
  - block: never reduce ra_pages in blk_apply_bdi_limits (Ming Lei) [RHEL-87965]
  - blk-throttle: fix lower bps rate by throtl_trim_slice() (Ming Lei) [RHEL-90190]
  - selftests/memfd/memfd_test: fix possible NULL pointer dereference (Joel Savitz) [RHEL-94835]
  - Documentation/mm: fix spelling mistake (Audra Mitchell) [RHEL-88452]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-598.el9]
changelog:
  - ibmvnic: Use kernel helpers for hex dumps (CKI Backport Bot) [RHEL-89020] {CVE-2025-22104}
  - SUNRPC: Cleanup/fix initial rq_pages allocation (Benjamin Coddington) [RHEL-91267]
  - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99125] {CVE-2022-49846}
  - platform/x86: dell_rbu: Bump version (David Arcari) [RHEL-87406]
  - platform/x86: dell_rbu: Stop overwriting data buffer (David Arcari) [RHEL-87406]
  - platform/x86: dell_rbu: Fix list usage (David Arcari) [RHEL-87406]
  - platform/x86: dell_rbu: Fix lock context warning (David Arcari) [RHEL-87406]
  - platform/x86: use PLATFORM_DEVID_NONE instead of -1 [partial] (David Arcari) [RHEL-87406]
  - nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable (Maurizio Lombardi) [RHEL-96225]
  - nvme-pci: make nvme_pci_npages_prp() __always_inline (Maurizio Lombardi) [RHEL-96225]
  - nvme: unblock ctrl state transition for firmware update (Maurizio Lombardi) [RHEL-96225]
  - nvmet-tcp: don't restore null sk_state_change (Maurizio Lombardi) [RHEL-96225]
  - nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS (Maurizio Lombardi) [RHEL-96225]
  - nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS (Maurizio Lombardi) [RHEL-96225]
  - nvme-tcp: fix premature queue removal and I/O failover (Maurizio Lombardi) [RHEL-96225]
  - nvme-pci: add quirks for WDC Blue SN550 15b7:5009 (Maurizio Lombardi) [RHEL-96225]
  - nvme-pci: fix queue unquiesce check on slot_reset (Maurizio Lombardi) [RHEL-96225]
  - cpufreq/sched: Set need_freq_update in ignore_dl_rate_limit() (Phil Auld) [RHEL-96250]
  - cpufreq/sched: Explicitly synchronize limits_changed flag handling (Phil Auld) [RHEL-96250]
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Phil Auld) [RHEL-96250]
  - Revert "sched/core: Reduce cost of sched_move_task when config autogroup" (Phil Auld) [RHEL-96250]
  - sched/membarrier: Fix redundant load of membarrier_state (Phil Auld) [RHEL-96250]
  - sched: Clarify wake_up_q()'s write to task->wake_q.next (Phil Auld) [RHEL-96250]
  - freezer, sched: Report frozen tasks as 'D' instead of 'R' (Phil Auld) [RHEL-96250]
  - selftests: bpf: test batch lookup on array of maps with holes (Jerome Marchand) [RHEL-85486]
  - selftests/bpf: Add test case for the freeing of bpf_timer (Jerome Marchand) [RHEL-85486]
  - selftests/bpf: Add distilled BTF test about marking BTF_IS_EMBEDDED (Jerome Marchand) [RHEL-85486]
  - bpftool: Fix control flow graph segfault during edge creation (Jerome Marchand) [RHEL-85486]
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Jerome Marchand) [RHEL-85486]
  - bpf: skip non exist keys in generic_map_lookup_batch (Jerome Marchand) [RHEL-85486]
  - bpf: Fix softlockup in arena_map_free on 64k page kernel (Jerome Marchand) [RHEL-83203 RHEL-85486 RHEL-96489] {CVE-2025-21851}
  - bpf: avoid holding freeze_mutex during mmap operation (Jerome Marchand) [RHEL-83348 RHEL-85486] {CVE-2025-21853}
  - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic (Jerome Marchand) [RHEL-85486]
  - bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT (Jerome Marchand) [RHEL-85486]
  - bpf: Send signals asynchronously if !preemptible (Jerome Marchand) [RHEL-81243 RHEL-85486] {CVE-2025-21728}
  - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED (Jerome Marchand) [RHEL-85486]
  - libbpf: Fix return zero when elf_begin failed (Jerome Marchand) [RHEL-85486]
  - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test (Jerome Marchand) [RHEL-85486]
  - bpf: Use refcount_t instead of atomic_t for mmap_count (Jerome Marchand) [RHEL-85486]
  - selftests/bpf: Avoid generating untracked files when running bpf selftests (Jerome Marchand) [RHEL-85486]
  - bpf: Fix deadlock when freeing cgroup storage (Jerome Marchand) [RHEL-83308 RHEL-85486] {CVE-2024-58088}
  - bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing (Jerome Marchand) [RHEL-85486]
  - bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (Jerome Marchand) [RHEL-85486]
  - selftests/bpf: Fix fill_link_info selftest on powerpc (Jerome Marchand) [RHEL-85486]
  - libbpf: Fix segfault due to libelf functions not setting errno (Jerome Marchand) [RHEL-85486]
  - selftests/bpf: Actuate tx_metadata_len in xdp_hw_metadata (Jerome Marchand) [RHEL-85486]
  - libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing (Jerome Marchand) [RHEL-85486]
  - scsi: qla2xxx: Update version to 10.02.09.400-k (Nilesh Javali) [RHEL-90557]
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Nilesh Javali) [RHEL-90557]
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Nilesh Javali) [RHEL-90557]
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Nilesh Javali) [RHEL-90557]
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control (Nilesh Javali) [RHEL-90557]
  - scsi: qla2xxx: Fix abort in bsg timeout (Nilesh Javali) [RHEL-90557]
  - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-81467] {CVE-2025-21759}
  - tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-97545]
  - ALSA: update RHEL kconfigs for 6.15 upstream code (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: hda: do not use missing devm_kmalloc_array() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: fix type_max() issue (rhel only) (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: acp70: Fix for missing acp_dev_data structure (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dt-bindings: add regulator support to dmic codec (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dt-bindings: Convert dmic-codec to DT schema (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dt-bindings: Add schema for "awinic,aw88166" (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Create DAI drivers from DisCo (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Create ALSA controls from DisCo (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Create DAPM widgets and routes from DisCo (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dapm: Add component level pin switches (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Move allocation of PDE delays array (Jaroslav Kysela) [RHEL-80657]
  - Documentation: driver: add SoundWire BRA description (Jaroslav Kysela) [RHEL-80657]
  - regcache: Add support for sorting defaults arrays (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dt-bindings: imx-card: Add playback-only and capture-only property (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dt-bindings: wcd937x-sdw: Add static channel mapping support (Jaroslav Kysela) [RHEL-80657]
  - HID: hid-plantronics: Add mic mute mapping and generalize quirks (Jaroslav Kysela) [RHEL-80657]
  - dt-bindings: mfd: motorola-cpcap: Document audio-codec interrupts (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Fix minor typo (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Remove regmap module macros (Jaroslav Kysela) [RHEL-80657]
  - ALSA: ppc: Remove i2c client removal hack (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform (Jaroslav Kysela) [RHEL-80657]
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Jaroslav Kysela) [RHEL-80657]
  - ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: hda: Fix UAF when reloading module (Jaroslav Kysela) [RHEL-80657]
  - ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: sh: SND_AICA should depend on SH_DMA_API (Jaroslav Kysela) [RHEL-80657]
  - ALSA: usb-audio: Add sample rate quirk for Audioengine D1 (Jaroslav Kysela) [RHEL-80657]
  - ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info (Jaroslav Kysela) [RHEL-80657]
  - ALSA/hda: intel-sdw-acpi: Correct sdw_intel_acpi_scan() function parameter (Jaroslav Kysela) [RHEL-80657]
  - ALSA: seq: Fix delivery of UMP events to group ports (Jaroslav Kysela) [RHEL-80657]
  - ASoc: SOF: topology: connect DAI to a single DAI link (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: hda-bus: Use PIO mode on ACE2+ platforms (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: fix for irq handler return status (Jaroslav Kysela) [RHEL-80657]
  - ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction (Jaroslav Kysela) [RHEL-80657] {CVE-2025-37934}
  - ASoC: intel/sdw_utils: Add volume limit to cs35l56 speakers (Jaroslav Kysela) [RHEL-80657]
  - ASoC: intel/sdw_utils: Add volume limit to cs42l43 speakers (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek - Add more HP laptops which need mute led fixup (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek: Fix built-mic regression on other ASUS models (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: catpt: avoid type mismatch in dev_dbg() format (Jaroslav Kysela) [RHEL-80657]
  - ALSA: usb-audio: Fix duplicated name in MIDI substream names (Jaroslav Kysela) [RHEL-80657]
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion (Jaroslav Kysela) [RHEL-80657] {CVE-2025-37891}
  - ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda: Apply volume control on speaker+lineout for HP EliteStudio AIO (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Fix devm_snd_soc_register_card(acp-pdm-mach) failure (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot (Jaroslav Kysela) [RHEL-80657] {CVE-2025-37919}
  - ASoC: amd: acp: Fix NULL pointer deref on acp resume path (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-acpi-intel-ptl-match: add empty item to ptl_cs42l43_l3[] (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs42l43: Disable headphone clamps during type detection (Jaroslav Kysela) [RHEL-80657]
  - ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek - Enable speaker for HP platform (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: sof_sdw: Add NULL check in asoc_sdw_rt_dmic_rtd_init() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence (Jaroslav Kysela) [RHEL-80657]
  - ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs-amp-lib-test: Don't select SND_SOC_CS_AMP_LIB (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: Add of_match_table for aw888081 driver (Jaroslav Kysela) [RHEL-80657]
  - ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event (Jaroslav Kysela) [RHEL-80657]
  - soundwire: bus: Fix race on the creation of the IRQ domain (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs42l43: Reset clamp override on jack removal (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/cirrus_scodec_test: Don't select dependencies (Jaroslav Kysela) [RHEL-80657]
  - ALSA: azt2320: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: hdmi-codec: use RTD ID instead of DAI ID for ELD entry (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/tas2781: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: fsl_asrc_dma: get codec or cpu dai from backend (Jaroslav Kysela) [RHEL-80657]
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow (Jaroslav Kysela) [RHEL-80657] {CVE-2025-37979}
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek - Support mute led function for HP platform (Jaroslav Kysela) [RHEL-80657]
  - ASoC: imx-card: Add NULL check in imx_card_probe() (Jaroslav Kysela) [RHEL-80657] {CVE-2025-22066}
  - ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer (Jaroslav Kysela) [RHEL-80657]
  - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. (Jaroslav Kysela) [RHEL-80657]
  - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. (Jaroslav Kysela) [RHEL-80657]
  - ASoC: q6apm: add q6apm_get_hw_pointer helper (Jaroslav Kysela) [RHEL-80657]
  - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: hda/ptl: Move mic privacy change notification sending to a work (Jaroslav Kysela) [RHEL-80657]
  - ALSA/hda: intel-sdw-acpi: Remove (explicitly) unused header (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: Let SND_SOF_SOF_HDA_SDW_BPT select SND_HDA_EXT_CORE (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/tas2781: Upgrade calibratd-data writing code to support Alpha and Beta dsp firmware (Jaroslav Kysela) [RHEL-80657]
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (Jaroslav Kysela) [RHEL-80657]
  - ASoC: sma1307: Fix error handling in sma1307_setting_loaded() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: wsa884x: Correct VI sense channel mask (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: wsa883x: Correct VI sense channel mask (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda: tas2781-i2c: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda: cs35l56: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek: Add support for various HP Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80657]
  - ALSA: timer: Don't take register_mutex with copy_from/to_user() (Jaroslav Kysela) [RHEL-80657] {CVE-2025-23134}
  - ASoC: SDCA: Correct handling of selected mode DisCo property (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: yc: update quirk data for new Lenovo model (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247 (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315 (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dmic: Fix NULL pointer dereference (Jaroslav Kysela) [RHEL-80657]
  - ALSA: oxygen: Fix dependency on CONFIG_PM_SLEEP (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Apply platform_max after deciding control type (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Remove some unnecessary local variables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Factor out common code from get callbacks (Jaroslav Kysela) [RHEL-80657]
  - irqdomain: sound: Switch to irq_domain_create_linear() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Factor out common code from put callbacks (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Factor out common code from info callbacks (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Remove snd_soc_put_volsw_range() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Remove snd_soc_get_volsw_range() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Remove snd_soc_info_volsw_range() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Add control to register value helper (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Replace snd_soc_read_signed() with new helper (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Factor out helper to check valid control values (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Update mask generation to use GENMASK (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Update comments for xr_sx control helpers (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Minor formatting fixups (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops-test: Add some basic kunit tests for soc-ops (Jaroslav Kysela) [RHEL-80657]
  - ALSA: echoaudio: remove unused variable (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2781: Support dsp firmware Alpha and Beta seaies (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: ntp8918: Remove duplicate clk.h header (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ti: j721e-evm: Reduce log level for EPROBE_DEFER (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Fix acp_common_hw_ops declaration error (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Fix acp_resource duplicate symbol error (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Fix snd_soc_acpi_mach id's duplicate symbol error (Jaroslav Kysela) [RHEL-80657]
  - ASoC: pcm3168a: Convert to EXPORT_GPL_DEV_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: xtensa: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tegra30: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tegra20: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tegra210: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tegra186: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: stm: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: pci: Convert to EXPORT_NS_DEV_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: acpi: Convert to EXPORT_NS_DEV_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rockchip: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rcar: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: qcom: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8195: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8192: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8186: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8183: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8173: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt6797: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt2701: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: intel: catpt: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: img: Convert to RUNTIME_PM_OPS() and co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: fsl: Convert to RUNTIME_PM_OPS() and co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dwc: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wsa884x: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wsa883x: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wsa881x: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wm8994: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wm8962: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wm8804: Convert to EXPORT_GPL_DEV_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wm5100: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wm2200: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wcd939x: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wcd938x: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wcd937x: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ts3a227e: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2552: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rtq9128: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt9120: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt722: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt721: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt715: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt712: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt711: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt700-sdw: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt5682-sdw: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt5645: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt5514: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt1320-sdw: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt1318-sdw: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt1316-sdw: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt1308-sdw: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt1017-sdca-sdw: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: pcm512x: Convert to EXPORT_GPL_DEV_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mt6660: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: max98927: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: max9860: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: max98520: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: max98396: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: max98390: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: max98373: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: max98090: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: lpass: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: hdac_hdmi: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: da7213: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cx2072x: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs53l30: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs4349: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs43130: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs42xx8: Convert to EXPORT_GPL_DEV_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs42l83: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs42l51: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs42l42: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs4234: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs35l34: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs35l33: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs35l32: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ak5558: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ak4458: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ak4375: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ASoC: au1x: Convert to DEFINE_SIMPLE_DEV_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: ac97: convert timeouts to secs_to_jiffies() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: Add DMI quirk for ACP6X mic support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs35l56: Remove redundant 'flush_workqueue()' calls (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() (Jaroslav Kysela) [RHEL-80657] {CVE-2025-37941}
  - ASoC: soc-pcm: tidyup function name to snd_soc_dpcm_be_can_xxx() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Fix leak in acp_pci_probe() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tlv320adc3xxx: remove unnecessary NULL check before clk_disable_unprepare() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tegra: Use non-atomic timeout for ADX status register (Jaroslav Kysela) [RHEL-80657]
  - ASoC: sma1307: Add NULL check in sma1307_setting_loaded() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add support for GE Entity properties (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add SDCA Control Range data access helper (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add type flag for Controls (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Allow naming of imp def controls (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Use __free() to manage local buffers (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Tidy up initialization write parsing (Jaroslav Kysela) [RHEL-80657]
  - ASoC: pcm3008: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-80657]
  - ASoC: pcm1681: Drop unused include (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: Add aw88166 amplifier driver (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek: Always honor no_shutup_pins (Jaroslav Kysela) [RHEL-80657]
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards (Jaroslav Kysela) [RHEL-80657]
  - ALSA: intel-hdmi-audio: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: vx222: Convert to DEFINE_SIMPLE_DEV_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: oxygen: Convert to EXPORT_SIMPLE_DEV_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/tegra: Convert to RUNTIME_PM_OPS() & co (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda-intel: Convert to RUNTIME_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda: Use RUNTIME_PM_OPS() and pm_ptr() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: pcm: Convert to SYSTEM_SLEEP_PM_OPS() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: atmel: Convert to DEFINE_SIMPLE_DEV_PM_OPS() macro (Jaroslav Kysela) [RHEL-80657]
  - ALSA: ac97: Convert to RUNTIME_PM_OPS() macro (Jaroslav Kysela) [RHEL-80657]
  - ASoC: sun4i-codec: add h616 card long_name (Jaroslav Kysela) [RHEL-80657]
  - ASoC: sun4i-codec: support hp-det-gpios property (Jaroslav Kysela) [RHEL-80657]
  - ASoC: sun4i-codec: correct dapm widgets and controls for h616 (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2770: Fix and redo I/V sense TDM slot setting logic (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2770: Factor out set_ivsense_slots (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2764: Add control concerning overcurrent events (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2764: Extend driver to SN012776 (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: ipc4-topology: Allocate ref_params on stack (Jaroslav Kysela) [RHEL-80657]
  - ALSA: ctxfi: change dao_set_input functions from kzalloc to kcalloc (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: speyside: Free gpiod table (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Fix for enabling DMIC on acp platforms via _DSD entry (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Refactor renoir platform resource structure (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Refactor rembrant platform resource structure (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Refactor acp63 platform resource structure (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Refactor acp70 platform resource structure (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Remove white line (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Move spin_lock and list initialization to acp-pci driver (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Remove redundant acp_dev_data structure (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Add new interrupt handle callbacks in acp_common_hw_ops (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Refactor acp machine select (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Refactor acp platform device creation (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Refactor dmic-codec platform device creation (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Implement acp_common_hw_ops support for acp platforms (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Remove redundant acp70 chip->name (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Add cs42l43 support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cs35l41: check the return value from spi_setup() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt711-sdca: add DP0 support (Jaroslav Kysela) [RHEL-80657]
  - soundwire: debugfs: add interface for BPT/BRA transfers (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: hda-sdw-bpt: add CHAIN_DMA support (Jaroslav Kysela) [RHEL-80657]
  - soundwire: intel_ace2x: add BPT send_async/wait callbacks (Jaroslav Kysela) [RHEL-80657]
  - soundwire: intel: add BPT context definition (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: hda-sdw-bpt: add helpers for SoundWire BPT DMA (Jaroslav Kysela) [RHEL-80657]
  - soundwire: intel_auxdevice: add indirection for BPT send_async/wait (Jaroslav Kysela) [RHEL-80657]
  - soundwire: cadence: add BTP/BRA helpers to format data (Jaroslav Kysela) [RHEL-80657]
  - soundwire: bus: add bpt_stream pointer (Jaroslav Kysela) [RHEL-80657]
  - soundwire: bus: add send_async/wait APIs for BPT protocol (Jaroslav Kysela) [RHEL-80657]
  - soundwire: stream: reuse existing code for BPT stream (Jaroslav Kysela) [RHEL-80657]
  - soundwire: stream: special-case the bus compute_params() routine (Jaroslav Kysela) [RHEL-80657]
  - soundwire: stream: extend sdw_alloc_stream() to take 'type' parameter (Jaroslav Kysela) [RHEL-80657]
  - soundwire: extend sdw_stream_type to BPT (Jaroslav Kysela) [RHEL-80657]
  - soundwire: cadence: add BTP support for DP0 (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dmic: add regulator support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: ptl: Add support for mic privacy (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: hda/shim: Add callbacks to handle mic privacy change for sdw (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: hda-mlink: Add support for mic privacy in VS SHIM registers (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: ipc4: Add support for Intel HW managed mic privacy messaging (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: Create ptl.c as placeholder for Panther Lake features (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: mtl: Stop exporting dsp_ops callback functions (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: lnl/ptl: Only set dsp_ops which differs from MTL (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: mtl: Split up dsp_ops setup code (Jaroslav Kysela) [RHEL-80657]
  - ALSA: seq: Avoid client data changes during proc reads (Jaroslav Kysela) [RHEL-80657]
  - ALSA: seq: Improve data consistency at polling (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-dai: add snd_soc_dai_mute_is_ctrled_at_trigger() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-pcm: reuse dpcm_state_string() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dapm: Fix changes to DECLARE_ADAU17X1_DSP_MUX_CTRL (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add cs42l43 6x cs35l56 support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: soc-acpi-intel-lnl-match: add cs42l43 6x cs35l56 support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add sdw multi function mockup codec (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: soc-acpi-intel-lnl-match: add sdw multi function mockup codec (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: add multi-function SDW mockup codec match (Jaroslav Kysela) [RHEL-80657]
  - ASoC: sdw_utils: add mic and amp dais to 0xaaaa codec (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt713_vb_l3_rt1320_l12 support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt712_vb_l3_rt1320_l2 support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Intel: adl: add 2xrt1316 audio configuration (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-pcm: merge soc_pcm_hw_update_format/subformat() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: doc: use SND_SOC_DAILINK_xxx() macro (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Tidy up SOC_DOUBLE_* and SOC_SINGLE_* helpers (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: tm2_wm5110: Drop unused include (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: tobermory: Drop unused include (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: speyside: Convert to GPIO descriptor (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: lowland: Drop unused include (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: littlemill: Drop unused include (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: bells: Drop unused include (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt6359: Fix DT parse error due to wrong child node name (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Tidy up SOC_DOUBLE_R_* helpers (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dapm: Use ASoC control macros where possible (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dapm: Add missing SOC_DAPM_DOUBLE_R_TLV() helper (Jaroslav Kysela) [RHEL-80657]
  - ASoC: atmel: tse850-pcm5142: Use SOC_SINGLE_EXT() helper macro (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wsa881x: Use SOC_SINGLE_EXT_TLV() helper macro (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wm9713: Use SOC_DOUBLE_EXT() helper macro (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wm9712: Use SOC_SINGLE_EXT() helper macro (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wcd938x: Use SOC_SINGLE_EXT_TLV() helper macro (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2562: Use SOC_SINGLE_EXT_TLV() helper macro (Jaroslav Kysela) [RHEL-80657]
  - ASoC: sma1307: Use SOC_SINGLE_EXT() helper macro (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt715: Remove duplicate SOC_DOUBLE_R_EXT() helper macro (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Remove unused helper macro (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: wsa883x: Implement temperature reading and hwmon (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: hda-dai: Remove unnecessary bool conversion (Jaroslav Kysela) [RHEL-80657]
  - ASoC: audio-graph-card2-custom-sample.dtsi: remove original sample (Jaroslav Kysela) [RHEL-80657]
  - ASoC: audio-graph-card2-custom-sample2.dtsi: Separate Sample DT (Jaroslav Kysela) [RHEL-80657]
  - ASoC: audio-graph-card2-custom-sample1.dtsi: Separate Sample DT (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-dai: remove SND_SOC_DAIFMT_CB{MS}_CF{MS} (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rockchip: rockchip_rt5645: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rockchip: rockchip_max98090: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rockchip: rk3399_gru_sound: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rockchip: rk3288_hdmi_analog: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8195-mt6359: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8192-mt6359-rt1015-rt5682: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8183-mt6358-ts3a227-max98357: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8183-da7219-max98357: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8173-rt5650-rt5514: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8173-rt5650-rt5676: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8173-max98090: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8173-rt5650: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt2701-cs42448: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt2701-wm8960: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: smdk_wm8994pcm: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: midas_wm1811: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: aries_wm8994: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: smdk_wm8994: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: littlemill: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: tm2_wm5110: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: tobermory: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: speyside: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: lowland: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: arndale: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: odroid: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: bells: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: samsung: snow: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: intel: max98357a: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: intel: max98927: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: intel: nau8825: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: intel: ssm4567: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: intel: da7219: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: intel: rt5514: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: intel: rt298: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: intel: rt286: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: intel: rt274: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tegra: tegra_wm8903: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tegra: tegra_asoc_machine: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: meson: meson-card-utils: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: meson: t9015: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ux500: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: lochnagar-sc: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: sgtl5000: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: src4xxx: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: twl4030: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: arizona: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: madera: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm9713: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm9081: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8996: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8995: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8994: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8993: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8991: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8990: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8988: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8985: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8983: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8978: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8974: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8971: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8962: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8961: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8960: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8955: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8940: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8904: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8903: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8900: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8804: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8776: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8770: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8753: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8750: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8741: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8737: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8728: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8711: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8580: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8524: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8523: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8510: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8400: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm8350: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm5100: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: wm2200: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5682s: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5682: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5677: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5670: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5668: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5665: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5663: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5660: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5659: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5651: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5645: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5640: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5631: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt5616: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt1308: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt1305: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt1016: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt1015: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt1011: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt298: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt286: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rt274: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: rk817: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: nau8825: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: nau8824: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: nau8822: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: nau8810: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: nau8540: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: da9055: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: da732x: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: da7219: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: da7218: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: da7210: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs53l30: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs43130: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs42xx8: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs42l73: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs42l56: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs42l52: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs42l51: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs42l42: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs35l34: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs35l33: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs35l32: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs4341: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs4271: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs4270: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs4265: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codec: cs4234: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: qcom: sc7280: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: qcom: sc7180: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: pxa: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mxs: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: fsl: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ti: omap3pandora: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ti: omap-twl4030: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ti: davinci-evm: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ti: j721e-evm: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ti: ams-delta: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ti: osk5912: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ti: n810: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Documentation: Codec to Codec: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5677: Update definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt298: Update definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt286: Update definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5682: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5670: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5668: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5665: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5663: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5660: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5659: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5651: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5645: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5640: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt5514: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt274: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt1318: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt1308: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt1305: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt1019: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt1016: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt1015: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: rt1011: Fix definition of device_id tables (Jaroslav Kysela) [RHEL-80657]
  - ALSA: seq: seq_oss_event: fix inconsistent indenting warning in note_on_event() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: es18xx: Fix spelling mistake "grap" -> "grab" (Jaroslav Kysela) [RHEL-80657]
  - ALSA: usb-audio: enable support for Presonus Studio 1824c within 1810c file (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add helper to write out defaults and fixed values (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add regmap helpers for parsing for DisCo Constant values (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add generic regmap SDCA helpers (Jaroslav Kysela) [RHEL-80657]
  - ALSA: opti9xx: fix inconsistent indenting warning in snd_opti9xx_configure() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: emu10k1: fix inconsistent indenting warning in snd_emu10k1_synth_free() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: pcm: Drop superfluous NULL check in snd_pcm_format_set_silence() (Jaroslav Kysela) [RHEL-80657]
  - soundwire: amd: change the log level for command response log (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2781: Clean up for some define (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt712-sdca: Add FU05 playback switch control (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: acp70: Remove unnecessary if-check (Jaroslav Kysela) [RHEL-80657]
  - ASoC: q6dsp: q6apm: replace kzalloc() with kcalloc() in q6apm_map_memory_regions() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: sh: migor: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ti: rx51: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: kirkwood: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - ASoC: Documentation: DPCM: use inclusive language for SND_SOC_DAIFMT_CBx_CFx (Jaroslav Kysela) [RHEL-80657]
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs (Jaroslav Kysela) [RHEL-80657] {CVE-2025-37805}
  - ASoC: topology: Save num_channels value for mixer controls (Jaroslav Kysela) [RHEL-80657]
  - ASoC: topology: Create kcontrols based on their type (Jaroslav Kysela) [RHEL-80657]
  - ASoC: imx-card: Add playback_only or capture_only support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cros_ec_codec: Use str_enable_disable() helper in wov_enable_put() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: atmel: atmel-classd: Use str_enabled_disabled() helper (Jaroslav Kysela) [RHEL-80657]
  - ASoC: fsl: fsl_qmc_audio: Remove unnecessary bool conversions (Jaroslav Kysela) [RHEL-80657]
  - ALSA: arm: aaci: Constify amba_id table (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-core: Use str_yes_no() in snd_soc_close_delayed_work() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: fix inconsistent indenting warning in check_and_handle_sdw_dma_irq() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: fsl: imx-pcm-fiq: Switch to use hrtimer_setup() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: Use str_enable_disable() helper (Jaroslav Kysela) [RHEL-80657]
  - ASoC: wm_hubs: Use str_enable_disable() in wm_hubs_update_class_w() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: ipc3: Use str_enabled_disabled() helper function (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Intel: Don't import non-existing module namespace (Jaroslav Kysela) [RHEL-80657]
  - ASoC: ops: Enforce platform maximum on initial value (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2764: Mark SW_RESET as volatile (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2764: Wait for ramp-down after shutdown (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2764: Power up/down amp on mute ops (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-pcm: cleanup dpcm_fe_dai_do_trigger() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-pcm: cleanup dpcm_dai_trigger_fe_be() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: remove dpcm_process_paths() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: remove update from snd_soc_card (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-pcm: remove duplicate param from __soc_pcm_hw_params() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-pcm: makes dpcm_dapm_stream_event() void (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-ops: makes snd_soc_read_signed() void (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-core: makes snd_soc_set_dmi_name() local (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-pcm: no need to check dpcm->fe on dpcm_be_connect() (Jaroslav Kysela) [RHEL-80657]
  - soundwire: slave: fix an OF node reference leak in soundwire slave device (Jaroslav Kysela) [RHEL-80657]
  - soundwire: Use str_enable_disable-like helpers (Jaroslav Kysela) [RHEL-80657]
  - soundwire: amd: add soundwire host wake interrupt enable/disable sequence (Jaroslav Kysela) [RHEL-80657]
  - soundwire: amd: set ACP_PME_EN during runtime suspend sequence (Jaroslav Kysela) [RHEL-80657]
  - soundwire: amd: set device power state during suspend/resume sequence (Jaroslav Kysela) [RHEL-80657]
  - soundwire: amd: add support for ACP7.0 & ACP7.1 platforms (Jaroslav Kysela) [RHEL-80657]
  - soundwire: amd: add debug log for soundwire wake event (Jaroslav Kysela) [RHEL-80657]
  - soundwire: amd: change the soundwire wake enable/disable sequence (Jaroslav Kysela) [RHEL-80657]
  - soundwire: Revert "soundwire: intel_auxdevice: start the bus at default frequency" (Jaroslav Kysela) [RHEL-80657]
  - soundwire: cadence_master: set frame shape and divider based on actual clk freq (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tegra: Remove the isomgr_bw APIs export (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: use switch statements for acp pci revision id check (Jaroslav Kysela) [RHEL-80657]
  - ASoC: adau1701: use gpiod_multi_set_value_cansleep (Jaroslav Kysela) [RHEL-80657]
  - ASoC: fsl_micfil: Add decimation filter bypass mode support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: wcd93xx-sdw: fix of_property_read_bool() warnings (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tscs454: Use str_enable_disable() in pll_power_event() (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda: intel: Fix Optimus when GPU has no sound (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add support for PDE Entity properties (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add support for clock Entity properties (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add support for IT/OT Entity properties (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add Channel Cluster parsing (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add parsing for Control range structures (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add SDCA Control parsing (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add support for Entity 0 (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Parse initialization write table (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Add code to parse Function information (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SDCA: Minor formatting and naming tweaks (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: amd_sdw: Add quirks for Dell SKU's (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: amd-acp70-acpi-match: Add RT1320 & RT722 combination soundwire machine (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: amd-acp70-acpi-match: Add rt722 support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: add RT711, RT714 & RT1316 support for ACP7.0 platform (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: add machine driver changes for ACP7.0 and ACP7.1 platforms (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: update Pink Sardine platform Kconfig description (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: update file description and copyright year (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: update module description (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: add soundwire wake interrupt handling (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: add soundwire dma interrupts handling for ACP7.0 platform (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: implement function to restore dma config for ACP7.0 platform (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: add ACP7.0 & ACP7.1 specific soundwire dma driver changes (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: add pm ops related hw_ops for ACP7.0 & ACP7.1 platforms (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: add pci driver hw_ops for ACP7.0 & ACP7.1 variants (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: rename acp_restore_sdw_dma_config() function (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: refactor soundwire dma interrupts enable/disable sequence (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: refactor soundwire dma driver code (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: store acp revision id in SoundWire dma driver private data (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: refactor soundwire dma interrupt handling (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: add soundwire dma irq thread callback (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: add callback to read acp pin configuration (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: add callback functions for acp pci driver pm ops (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: add acp pci driver hw_ops for acp6.3 platform (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: use macro for ACP6.3 pci revision id (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: ps: rename structure names, variable and other macros (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tas2781: Switch to use %ptTsr (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-pcm: use snd_soc_ret() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: add symmetric_ prefix for dai->rate/channels/sample_bits (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-utils: care -EOPNOTSUPP on snd_soc_ret() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: add common snd_soc_ret() and use it (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: ipc4: Add support for split firmware releases (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dapm: unexport dapm_mark_endpoints_dirty() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: ipc4-pcm: Move out be_rate initialization from for loop in fixup (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dapm: unexport snd_soc_dapm_update_dai() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dapm: unexport snd_soc_dapm_init() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt8186: Remove unused mt8186_afe_(suspend|resume)_clock (Jaroslav Kysela) [RHEL-80657]
  - ASoC: qcom: sdw: Add get and set channel maps support from codec to cpu dais (Jaroslav Kysela) [RHEL-80657]
  - soundwire: qcom: Add set_channel_map api support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: wcd937x: Add static channel mapping support in wcd937x-sdw (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: ipc4-topology: Improve the information in prepare_copier prints (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: pcm: Add snd_sof_pcm specific wrappers for dev_dbg() and dev_err() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: pcm: Move period/buffer configuration print after platform open (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: Relocate and rework functionality for PCM stream freeing (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt722: get lane mapping property (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: mediatek: Use str_on_off() helper function (Jaroslav Kysela) [RHEL-80657]
  - ASoC: amd: acp: Use str_low_high() helper function (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dmic: Add DSD big endian format support (Jaroslav Kysela) [RHEL-80657]
  - ALSA: docs: Fix module paths in /sys (Jaroslav Kysela) [RHEL-80657]
  - ALSA: docs: Fix typo (Jaroslav Kysela) [RHEL-80657]
  - ASoC: hdmi-codec: dump ELD through procfs (Jaroslav Kysela) [RHEL-80657]
  - ALSA: hda/hdmi: extract common interface for ELD handling (Jaroslav Kysela) [RHEL-80657]
  - ALSA: lola: Remove unused lola_(save|restore)_mixer (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: wcd934x: use wcd934x binding header (Jaroslav Kysela) [RHEL-80657]
  - ASoC: dt-bindings: Add bindings for WCD934x DAIs (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: pcm3168a: Relax probing conditions (Jaroslav Kysela) [RHEL-80657]
  - ASoC: codecs: pcm3168a: Add ACPI match table (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties (Jaroslav Kysela) [RHEL-80657]
  - ASoC: soc-ops: remove soc-dpcm.h (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: mt6358: Remove unused functions (Jaroslav Kysela) [RHEL-80657]
  - ASoC: SOF: topology: Use krealloc_array() to replace krealloc() (Jaroslav Kysela) [RHEL-80657]
  - ASoC: tegra: Add interconnect support (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt722-sdca: Make use of new expanded MBQ regmap (Jaroslav Kysela) [RHEL-80657]
  - ASoC: rt722-sdca: Add some missing readable registers (Jaroslav Kysela) [RHEL-80657]
  - ASoC: mediatek: Remove unused mtk_memif_set_rate (Jaroslav Kysela) [RHEL-80657]
  - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cpcap: Implement jack detection (Jaroslav Kysela) [RHEL-80657]
  - ASoC: cpcap: Implement .set_bias_level (Jaroslav Kysela) [RHEL-80657]
  - ASoC: hdmi-codec: allow to refine formats actually supported (Jaroslav Kysela) [RHEL-80657]
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (Rafael Aquini) [RHEL-78678] {CVE-2025-21693}
  - mm: zswap: move allocations during CPU init outside the lock (Rafael Aquini) [RHEL-78678] {CVE-2025-21693}
  - mm: zswap: properly synchronize freeing resources during CPU hotunplug (Rafael Aquini) [RHEL-78678] {CVE-2025-21693}


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-15
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook
     server certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'
    Resolves: RHEL-78057
    Resolves: RHEL-78313
    Resolves: RHEL-78316


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-3
changelog:
  - Fix Keylime configuration upgrades issues introduced in last rebase
    Resolves: RHEL-475
  - Handle session close using a session manager
    Resolves: RHEL-1252
  - Add ignores for EV_PLATFORM_CONFIG_FLAGS
    Resolves: RHEL-947


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-4
changelog:
  - Update spec file to use %verify(not md5 size mode mtime) for files updated in %post scriptlets
    Resolves: RHEL-475


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: Karolina Kula <kkula@redhat.com> - 0.22.0-3
changelog:
  - Fix parsing of the kernel cmdline
  - Require leapp data with provided_data_streams 4.0+
  - Respect the release_id of the OS when processing DNF repositories to apply correct mapping for CentOS Stream
  - Resolves: RHEL-80336


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 8.2-1
changelog:
  - Rebuild for RHEL AV 8.2.
  - Include ntfs-3g-system-compression plugin.
    resolves: rhbz#1705234, rhbz#1796073


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.5.2-5
changelog:
  - replace use of ucpp with gcc cpp
  - Resolves: tdf#132739 two html style tags where there should be just one


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Stefan Berger <stefanb@linux.ibm.com> - 0.7.5-0.20210218gite271498466
changelog:
  - Addressed UBSAN and cppcheck detected issues
  - Return proper size of ECC Parameters to pass HLK tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Jakub Jelen <jjelen@redhat.com> - 1.1.33-4
changelog:
  - Do not build python bindings even if the python is available
  - Fix CVE-2019-13117 (#1728547)
  - Fix CVE-2019-13118 (#1728542)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "aarch64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j32  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-2
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-72468)
  - add command to set external grandmaster properties (RHEL-90585)
  - refresh link status on faults (RHEL-56168)


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.5.4-2
changelog:
  - Add requires for perl-diagnostics (#1893671) and perl-lib (#1893503)
  - Add other requires as nothing is now automatically supplied


author: Brian C. Lane <bcl@redhat.com> 34.9.15-1
changelog:
  - tito: Add the LoraxRHELTagger from rhel8-branch (bcl)
    Related: rhbz#2070910
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2070910


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> 34.9.27-1
changelog:
  - New lorax documentation - 34.9.27 (bcl) (bcl)
    Related: RHEL-83208
  - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl)
    Resolves: RHEL-83208
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl)
    Resolves: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> 34.9.28-1
changelog:
  - templates.d: Synchronize with lorax-templates-rhel (bcl)
    Related: RHEL-54712
    Resolves: RHEL-69019
  - lorax: Change default rootfs size to 4GiB (bcl)
    Resolves: RHEL-95360


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Brian C. Lane <bcl@redhat.com> - 9.7-1
changelog:
  - Bump release version to 9.7 (bcl)
    Related: RHEL-91930
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91930


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Tom Callaway <spot@fedoraproject.org> - 33.3.1-17
changelog:
  - hack this ancient beastie to work with lua 5.4
  - maintainer, please update this to the current upstream release at your earliest convenience


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Christopher Tubbs <ctubbsii@fedoraproject.org> - 1:3.6.3-6
changelog:
  - Remove unneeded commons-logging from runtime class path (rhbz#1883751)
  - Also remove redundant commons-codec


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.1
changelog:
  - Set version to 105.0.1
  - Remove redundant package
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes CVE-2024-25629 (c-ares)


author: Andrei Radchenko <aradchen@redhat.com>
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove lua pretransaction script from spec file
    Resolves: RHEL-81122
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Jan Staněk <jstanek@redhat.com> - 2.0.3-6
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-86603


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
changelog:
  - Rebase to open-mv-tools 12.1.0 [bz#2121203]
  - Resolves: bz#2121203
    ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150190]
  - Resolves: bz#2150190
    ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177086]
  - Resolves: bz#2177086
    ([ESXi][RHEL9]open-vm-tools version 12.2.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
changelog:
  - ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
  - Resolves: bz#2208160
    ([ESXi][RHEL9] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215566]
  - Resolves: bz#2215566
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebaer to open-vm-tools 12.2.5
  - Resolves: bz#2214862
    ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
  - Resolves: bz#2236544
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
  - Resolves: RHEL-2446
    ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.5 [RHEL-45547]
  - Resolves: RHEL-45547
    ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63096]
  - Resolves: RHEL-63096
    ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
changelog:
  - Added some linker hardening flags to pass annocheck
    Related: rhbz#2031802

    * Tue Dec 14 2021 Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
  - Added gating
    Related: rhbz#2031794


author: Michael Petlan <mpetlan@redhat.com> - 1.2.0-2
changelog:
  - Update to upstream 1.2.0 -- fix opencsd_tag
    Related: rhbz#2041578

    * Fri Jan 21 2022 Michael Petlan <mpetlan@redhat.com> - 1.2.0-1
  - Update to upstream 1.2.0
    Related: rhbz#2041578


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Benedikt Bongartz <bongartz@redhat.com> - 0.95.0
changelog:
  - add observability user that is part of the systemd-journal group
  - add opentelemetry collector config folder (`/etc/opentelemetry-collector/configs`)
  - add opentelemetry collector default config
  - add microshift manifests


author: Felix Kolwa <fkolwa@redhat.com> - 0.102.1-4
changelog:
  - Fix SELinux policy resource names
  - Use sources for SELinux resources in spec file
  - Bump revision


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Kseniia Nivnia <knivnia@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-79113


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify post-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-81967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Add toolchain go1.23.7
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-81359


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Remove explicit go toolchain dependency
  - Update addresses CVE-2025-29786
    Resolves: RHEL-83841


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-82967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85033


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90050


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-24
changelog:
  - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519
  - pam.conf: remove tallylog. Resolves: RHEL-15324


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-26
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-2
changelog:
  - Drop user_namespace create allow rule, incompatible with current el9 kernel
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-3
changelog:
  - Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-4
changelog:
  - Switch to copies instead of links for pasta: previous workaround unreliable
  - Resolves: RHELPLAN-155811


author: Lauren Chilton <lchilton@redhat.com> - 6.2.2-4
changelog:
  - Removed excess headers for pcp2openmetrics tool (RHEL-39159)
  - Fix pcp2openmetrics '-s' option (RHEL-39132)
  - Fix pcp2openmetrics timestamps in archive mode (RHEL-32983)
  - Fix pcp2openmetrics output to adhere to prometheus parser (RHEL-39293)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-5
changelog:
  - Add rpm dependency on package providing ps(1) tool (RHEL-39491)
  - Update Java bytecode in pcp-testasuite package (RHEL-40718)


author: Nathan Scott <nathans@redhat.com> - 6.3.1-1
changelog:
  - New pcp-xsos utility for rapid system summaries (RHEL-30590)
  - Fix Upgrade scripts to not rewrite pmcd.conf (RHEL-40631)
  - Add new Hyper-V balloon usage metrics (RHEL-45715)
  - Auto-load pmdaproc in local context (RHEL-50941)
  - Fix a benign potential libpcp buffer overflow (RHEL-58914)
  - Fix pcp-zeroconf pmie.config write permission (RHEL-59366)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039)
  - Fix a multilib regression in PCP header files (RHEL-93186)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Added conditional lockdown policy access by pmdakvm (BZ 1940971)
  - Added spec file dependency on cyrus-sasl-scram (BZ 1942879)
  - Update to latest PCP sources (BZ 1957575)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-2
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)
  - Correct pcp-testsuite file permissions (BZ 1922040)
  - Resolve pcp-testsuite linkage problems (BZ 1950263)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-3
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)
  - Related: rhbz#1957575


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-4
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Peter Jones <pjones@redhat.com> - 113-10
changelog:
  - I really cannot figure out why bkernel01 thinks the certificate nickname
    starts with /CN=, but it does, so I'm gonna stop fighting with the sand.


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Remi Collet <rcollet@redhat.com> - 8.0.20-1
changelog:
  - rebase to 8.0.20 #2095752
  - clean unneeded dependency on useradd command #2095447
  - add upstream patch to initialize pcre before mbstring
  - retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi


author: Remi Collet <rcollet@redhat.com> - 8.0.30-2
changelog:
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <rcollet@redhat.com> - 8.0.30-3
changelog:
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-1
changelog:
  - stick with the v5.2-rhel branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Resolves: RHEL-60965


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80615


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x"
  - Resolves: RHEL-83262


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Masahiro Matsuya <mmatsuya@redhat.com> - 15.5-1
changelog:
  - update to 15.5
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Brian C. Lane <bcl@redhat.com> - 3.32.1-1
changelog:
  - Use .z version for new builds, start with 3.32.0 (bcl)
    Related: rhbz#1968762
  - tests: Use pykickstart/commands relative to the import (bcl)
    Related: rhbz#1968762


author: Brian C. Lane <bcl@redhat.com> - 3.32.2-1
changelog:
  - Add RHEL 9 handler (mkolman)
    Resolves: rhbz#1966730
  - Add RHEL 9 version for commands that had a RHEL version in the past (mkolman)
    Related: rhbz#1966730
  - Add RHEL 9 version for BTRFS related commands (mkolman)
    Related: rhbz#1966730


author: Brian C. Lane <bcl@redhat.com> - 3.32.4-1
changelog:
  - github: Add rhel9-branch to the list of branches (bcl)
    Related: rhbz#2054906
  - Fix validation of packages arguments (bcl)
    Resolves: rhbz#2054906


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: Brian C. Lane <bcl@redhat.com> - 3.32.6-1
changelog:
  - tests: Update ksvalidator tests to allow new wording for help output (bcl)
    Related: rhbz#2083269
  - rootpw: Use RHEL9 instead of F37 for new rootpw feature (bcl)
    Related: rhbz#2083269
  - rootpw: Add an --allow-ssh argument (bcl)
    Resolves: rhbz#2083269
  - github: Fix workflow to only send coverage for python 3.9 (bcl)
    Related: rhbz#2083269


author: Brian C. Lane <bcl@redhat.com> - 3.32.10-1
changelog:
  - Add DNS handling options to the network command (vslavik)
    Resolves: rhbz#2172531
  - whitelist_externals has changed to allowlist_externals (bcl)
    Related: rhbz#2172531


author: Brian C. Lane <bcl@redhat.com> - 3.32.11-1
changelog:
  - tox: Only run unit tests for python 3.6 (bcl)
    Related: RHEL-17662
  - Add conflict test between ostree sources (#2125655) (jkonecny)
    Related: RHEL-17662
  - Fix missing seen check for output generation (#2125655) (jkonecny)
    Related: RHEL-17662
  - Add new ostreecontainer command (#2125655) (jkonecny)
    Resolves: RHEL-17662
  - Check the conflicting commands automatically (vponcova)
    Related: RHEL-17662
  - Fix tests for conflicting commands (vponcova)
    Related: RHEL-17662
  - Add conflicting commands support (bcl)
    Related: RHEL-17662


author: Brian C. Lane <bcl@redhat.com> - 3.32.12-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61432


author: Brian C. Lane <bcl@redhat.com> - 3.32.14-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61432
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76501


author: Brian C. Lane <bcl@redhat.com> - 3.32.15-1
changelog:
  - workflows: run tests using only python 3.9 (bcl)
    Related: RHEL-75659
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-75659
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-75659


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-44
changelog:
  - Set $RPM_BUILD_ROOT in %{python3_...} macros
    to allow selecting alternate sysconfig install scheme based on that variable


author: Karolina Surma <ksurma@redhat.com> - 3.9-45
changelog:
  - Introduce -f (read from file) option to %py{3}_check_import
  - Introduce -t (filter top-level modules) option to %py{3}_check_import
  - Introduce -e (exclude module globs) option to %py{3}_check_import


author: Karolina Surma <ksurma@redhat.com> - 3.9-46
changelog:
  - Fix multiline arguments processing for %py_check_import
  - Fix %py_shebang_flags handling within %py_check_import
  - Process .pth files in buildroot's sitedirs in %py_check_import
  - Move import_all_modules.py from python-srpm-macros to python-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-47
changelog:
  - Set %__python3 value according to %python3_pkgversion
    I.e. when %python3_pkgversion is 3.12, %__python3 is /usr/bin/python3.12


author: Tomas Orsava <torsava@redhat.com> - 3.9-49
changelog:
  - Add lua helper functions to make it possible to automatically generate
    Obsoletes tags
  - Modify the %py_provides macro to also generate Obsoletes tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9-51
changelog:
  - Add Obsoletes tags with the python39- prefix for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


