# changelog

author: Augusto Caringi <acaringi@redhat.com> [5.14.0-603.el9]
changelog:
  - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode (Corinna Vinschen) [RHEL-83574]
  - igb: Get rid of spurious interrupts (Corinna Vinschen) [RHEL-83574]
  - igb: Add support for persistent NAPI config (Corinna Vinschen) [RHEL-83574]
  - igb: Link queues to NAPI instances (Corinna Vinschen) [RHEL-83574]
  - igb: Link IRQs to NAPI instances (Corinna Vinschen) [RHEL-83574]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-83574]
  - igb: reject invalid external timestamp requests for 82580-based HW (Corinna Vinschen) [RHEL-83574]
  - igb: Fix passing 0 to ERR_PTR in igb_run_xdp() (Corinna Vinschen) [RHEL-83574]
  - igb: Add AF_XDP zero-copy Tx support (Corinna Vinschen) [RHEL-83574]
  - igb: Add AF_XDP zero-copy Rx support (Corinna Vinschen) [RHEL-83574]
  - igb: Add XDP finalize and stats update functions (Corinna Vinschen) [RHEL-83574]
  - igb: Introduce XSK data structures and helpers (Corinna Vinschen) [RHEL-83574]
  - igb: Introduce igb_xdp_is_enabled() (Corinna Vinschen) [RHEL-83574]
  - igb: Remove static qualifiers (Corinna Vinschen) [RHEL-83574]
  - igbvf: remove unused spinlock (Corinna Vinschen) [RHEL-83574]
  - igb: Fix 2 typos in comments in igb_main.c (Corinna Vinschen) [RHEL-83574]
  - igbvf: Remove two unused declarations (Corinna Vinschen) [RHEL-83574]
  - landlock: Document LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET (Ryan Sullivan) [RHEL-94688]
  - samples/landlock: Add support for abstract UNIX socket scoping (Ryan Sullivan) [RHEL-94688]
  - selftests/landlock: Test inherited restriction of abstract UNIX socket (Ryan Sullivan) [RHEL-94688]
  - selftests/landlock: Test connected and unconnected datagram UNIX socket (Ryan Sullivan) [RHEL-94688]
  - selftests/landlock: Test UNIX sockets with any address formats (Ryan Sullivan) [RHEL-94688]
  - selftests/landlock: Test abstract UNIX socket scoping (Ryan Sullivan) [RHEL-94688]
  - selftests/landlock: Test handling of unknown scope (Ryan Sullivan) [RHEL-94688]
  - landlock: Add abstract UNIX socket scoping (Ryan Sullivan) [RHEL-94688]
  - bpf, sockmap: af_unix stream sockets need to hold ref for pair sock (John Fastabend) [RHEL-94688]
  - landlock: Various documentation improvements (Ryan Sullivan) [RHEL-94688]
  - landlock: Clarify documentation for struct landlock_ruleset_attr (Ryan Sullivan) [RHEL-94688]
  - landlock: Use bit-fields for storing handled layer access masks (Ryan Sullivan) [RHEL-94688]
  - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_acl_bloom_filter: Workaround for some LLVM versions (Ivan Vecera) [RHEL-94569]
  - selftests: vxlan_bridge: Test flood with unresolved FDB entry (Ivan Vecera) [RHEL-94569]
  - mlxsw: Add VXLAN bridge ports to same hardware domain as physical bridge ports (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_switchdev: Move mlxsw_sp_bridge_vxlan_join() (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_switchdev: Add an internal API for VXLAN leave (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum: Call mlxsw_sp_bridge_vxlan_{join, leave}() for VLAN-aware bridge (Ivan Vecera) [RHEL-94569]
  - mlxsw: Trap ARP packets at layer 2 instead of layer 3 (Ivan Vecera) [RHEL-94569]
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw() (Ivan Vecera) [RHEL-94569]
  - mlxsw: Enable Tx checksum offload (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_router: Remove unused functions (Ivan Vecera) [RHEL-94569]
  - mlxsw: Do not store Tx header length as driver parameter (Ivan Vecera) [RHEL-94569]
  - mlxsw: Move Tx header handling to PCI driver (Ivan Vecera) [RHEL-94569]
  - mlxsw: Define Tx header fields in txheader.h (Ivan Vecera) [RHEL-94569]
  - mlxsw: Initialize txhdr_info according to PTP operations (Ivan Vecera) [RHEL-94569]
  - mlxsw: Add mlxsw_txhdr_info structure (Ivan Vecera) [RHEL-94569]
  - net/mlxfw: Drop hard coded max FW flash image size (Ivan Vecera) [RHEL-94569]
  - selftests/net/forwarding: teamd command not found (Ivan Vecera) [RHEL-94569]
  - mlxsw: Switch to napi_gro_receive() (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_flower: Do not allow mixing sample and mirror actions (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4 (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: devlink_trap_police: Use defer for test cleanup (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: qos_max_descriptors: Use defer for test cleanup (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: qos_ets_strict: Use defer for test cleanup (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: qos_mc_aware: Use defer for test cleanup (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sch_red_core: Lower TBF rate (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sch_red_core: Send more packets for drop tests (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sch_red_core: Sleep before querying queue depth (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sch_red_core: Increase backlog size tolerance (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: sch_red_ets: Increase required backlog (Ivan Vecera) [RHEL-94569]
  - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst (Ivan Vecera) [RHEL-94569]
  - selftests: mlxsw: rtnetlink: Use devlink_reload() API (Ivan Vecera) [RHEL-94569]
  - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Ivan Vecera) [RHEL-94569]
  - wifi: ath12k: fix uaf in ath12k_core_init() (CKI Backport Bot) [RHEL-102086] {CVE-2025-38116}
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103375]
  - Input: synaptics - fix crash when enabling pass-through port (CKI Backport Bot) [RHEL-81215] {CVE-2025-21746}
  - Input: serio - define serio_pause_rx guard to pause and resume serio ports (CKI Backport Bot) [RHEL-81215] {CVE-2025-21746}
  - x86/efistub: Omit physical KASLR when memory reservations exist (Charles Haithcock) [RHEL-83461]
  - usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-100939]
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-100939]
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-100939]
  - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CKI Backport Bot) [RHEL-81477] {CVE-2024-57986}
  - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-75594]
  - bridge: netfilter: Fix forwarding of fragmented packets (Mohammad Heib) [RHEL-75594]
  - selftests: net/bridge : add tests for per vlan snooping with stp state changes (Mohammad Heib) [RHEL-75594]
  - net: bridge: mcast: update multicast contex when vlan state is changed (Mohammad Heib) [RHEL-75594]
  - net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions (Mohammad Heib) [RHEL-75594]
  - net: bridge: switchdev: do not notify new brentries as changed (Mohammad Heib) [RHEL-75594]
  - net: bridge: locally receive all multicast packets if IFF_ALLMULTI is set (Mohammad Heib) [RHEL-75594]
  - net: bridge: mcast: Notify on mdb offload failure (Mohammad Heib) [RHEL-75594]
  - net: bridge: Add offload_fail_notification bopt (Mohammad Heib) [RHEL-75594]
  - net: bridge: mcast: Add offload failed mdb flag (Mohammad Heib) [RHEL-75594]
  - selftests: test_bridge_neigh_suppress: Test unicast ARP/NS with suppression (Mohammad Heib) [RHEL-75594]
  - net: bridge: Prevent unicast ARP/NS packets from being suppressed by bridge (Mohammad Heib) [RHEL-75594]
  - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. (Mohammad Heib) [RHEL-75594]
  - net: switchdev: Convert blocking notification chain to a raw one (Mohammad Heib) [RHEL-75594]
  - bridge: mdb: Allow replace of a host-joined group (Mohammad Heib) [RHEL-75594]
  - bridge: Make br_is_nd_neigh_msg() accept pointer to "const struct sk_buff" (Mohammad Heib) [RHEL-75594]
  - selftests: net: Add a VLAN bridge binding selftest (Mohammad Heib) [RHEL-75594]
  - selftests: net: lib: Add a couple autodefer helpers (Mohammad Heib) [RHEL-75594]
  - selftests: net: lib: Add several autodefer helpers (Mohammad Heib) [RHEL-75594]
  - net: bridge: Handle changes in VLAN_FLAG_BRIDGE_BINDING (Mohammad Heib) [RHEL-75594]
  - net: bridge: Extract a helper to handle bridge_binding toggles (Mohammad Heib) [RHEL-75594]
  - bridge: Allow deleting FDB entries with non-existent VLAN (Mohammad Heib) [RHEL-75594]
  - bridge: Handle error of rtnl_register_module(). (Mohammad Heib) [RHEL-75594]
  - rcu/nocb: Fix missed RCU barrier on deoffloading (Čestmír Kalina) [RHEL-79879]
  - Revert "rcu/nocb: Fix rcuog wake-up from offline softirq" (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove swake_up_one_online() bandaid (Čestmír Kalina) [RHEL-79879]
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING (Čestmír Kalina) [RHEL-79879]
  - hrtimer: Select housekeeping CPU during migration (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Fix rcuog wake-up from offline softirq (Čestmír Kalina) [RHEL-79879]
  - rcu/kvfree: Refactor kvfree_rcu_queue_batch() (Čestmír Kalina) [RHEL-79879]
  - rcu/kvfree: Add kvfree_rcu_barrier() API (Čestmír Kalina) [RHEL-79879]
  - refscale: Constify struct ref_scale_ops (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Count outstanding callbacks per-task rather than per-CPU (Čestmír Kalina) [RHEL-79879]
  - rcuscale: NULL out top-level pointers to heap memory (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Use special allocator for rcu_scale_writer() (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Make rcu_scale_writer() tolerate repeated GFP_KERNEL  failure (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Make all writer tasks report upon hang (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Provide clear error when async specified without primitives (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Print detailed grace-period and barrier diagnostics (Čestmír Kalina) [RHEL-79879]
  - rcu: Mark callbacks not currently participating in barrier operation (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Dump grace-period statistics when rcu_scale_writer() stalls (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Dump stacks of stalled rcu_scale_writer() instances (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Save a few lines with whitespace-only change (Čestmír Kalina) [RHEL-79879]
  - rcu/tasks: Add rcu_barrier_tasks*() start time to diagnostics (Čestmír Kalina) [RHEL-79879]
  - rcu/tasks: Add detailed grace-period and barrier diagnostics (Čestmír Kalina) [RHEL-79879]
  - rcu/tasks: Mark callbacks not currently participating in barrier  operation (Čestmír Kalina) [RHEL-79879]
  - rcu: Provide rcu_barrier_cb_is_done() to check rcu_barrier() CBs (Čestmír Kalina) [RHEL-79879]
  - rcu/tasks: Update rtp->tasks_gp_seq comment (Čestmír Kalina) [RHEL-79879]
  - rcu/tasks: Check processor-ID assumptions (Čestmír Kalina) [RHEL-79879]
  - rcu-tasks: Fix access non-existent percpu rtpcp variable in  rcu_tasks_need_gpcb() (Čestmír Kalina) [RHEL-79879]
  - srcu: Mark callbacks not currently participating in barrier operation (Čestmír Kalina) [RHEL-79879]
  - rcu: Summarize RCU CPU stall warnings during CSD-lock stalls (Čestmír Kalina) [RHEL-79879]
  - locking/csd_lock: Provide an indication of ongoing CSD-lock stall (Čestmír Kalina) [RHEL-79879]
  - locking/csd_lock: Print large numbers as negatives (Čestmír Kalina) [RHEL-79879]
  - rcu: Defer printing stall-warning backtrace when holding rcu_node  lock (Čestmír Kalina) [RHEL-79879]
  - rcu: Let dump_cpu_task() be used without preemption disabled (Čestmír Kalina) [RHEL-79879]
  - rcu: Summarize expedited RCU CPU stall warnings during CSD-lock  stalls (Čestmír Kalina) [RHEL-79879]
  - rcu: Extract synchronize_rcu_expedited_stall() from  synchronize_rcu_expedited_wait() (Čestmír Kalina) [RHEL-79879]
  - srcu: Check for concurrent updates of heuristics (Čestmír Kalina) [RHEL-79879]
  - srcu: faster gp seq wrap-around (Čestmír Kalina) [RHEL-79879]
  - rcu: Annotate struct kvfree_rcu_bulk_data with __counted_by() (Čestmír Kalina) [RHEL-79879]
  - rcu: Better define "atomic" for list replacement (Čestmír Kalina) [RHEL-79879]
  - rcu/kfree: Warn on unexpected tail state (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename rcu_dyntick trace event into  rcu_watching (Čestmír Kalina) [RHEL-79879]
  - rcu: Update stray documentation references to  rcu_dynticks_eqs_{enter, exit}() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_momentary_dyntick_idle() into rcu_momentary_eqs() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_implicit_dynticks_qs() into  rcu_watching_snap_recheck() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename dyntick_save_progress_counter() into  rcu_watching_snap_save() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename struct rcu_data .exp_dynticks_snap into  .exp_watching_snap (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename struct rcu_data .dynticks_snap into .watching_snap (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_dynticks_zero_in_eqs() into  rcu_watching_zero_in_eqs() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_dynticks_in_eqs_since() into  rcu_watching_snap_stopped_since() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_dynticks_in_eqs() into rcu_watching_snap_in_eqs() (Čestmír Kalina) [RHEL-79879]
  - rcu: Rename rcu_dynticks_eqs_online() into rcu_watching_online() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename rcu_dynticks_curr_cpu_in_eqs() into rcu_is_watching_curr_cpu() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename rcu_dynticks_task*() into rcu_task*() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename DYNTICK_IRQ_NONIDLE into  CT_NESTING_IRQ_NONIDLE (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_nmi_nesting_cpu() into  ct_nmi_nesting_cpu() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_nmi_nesting() into  ct_nmi_nesting() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename struct context_tracking  .dynticks_nmi_nesting into .nmi_nesting (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_nesting_cpu() into  ct_nesting_cpu() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_nesting() into ct_nesting() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename struct context_tracking  .dynticks_nesting into .nesting (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_cpu() into  ct_rcu_watching_cpu() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks() into ct_rcu_watching() (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename RCU_DYNTICKS_IDX into CT_RCU_WATCHING (Čestmír Kalina) [RHEL-79879]
  - treewide: context_tracking: Rename CONTEXT_* into CT_STATE_* (Čestmír Kalina) [RHEL-79879]
  - context_tracking, rcu: Rename ct_dynticks_cpu_acquire() into  ct_rcu_watching_cpu_acquire() (Čestmír Kalina) [RHEL-79879]
  - rcu-tasks: Make Tasks RCU wait idly for grace-period delays (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add a stall_cpu_repeat module parameter (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add rcutree.nohz_full_patience_delay to TREE07 (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add mid-sized stall to TREE07 (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Make rcu_torture_write_types() print number of update  types (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Generic test for NUM_ACTIVE_*RCU_POLL* (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add SRCU ->same_gp_state and ->get_comp_state functions (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Remove redundant rcu_torture_ops get_gp_completed fields (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove superfluous memory barrier after bypass enqueue (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Conditionally wake up rcuo if not already waiting on GP (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Fix RT throttling hrtimer armed from offline CPU (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Simplify (de-)offloading state machine (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove SEGCBLIST_KTHREAD_CB (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove SEGCBLIST_RCU_CORE (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove halfway (de-)offloading handling from rcu_core (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove halfway (de-)offloading handling from rcu_core()'s  QS reporting (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove halfway (de-)offloading handling from bypass (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: (De-)offload callbacks on offline CPUs only (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Introduce nocb mutex (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Assert no callbacks while nocb kthread allocation fails (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Move nocb field at the end of state struct (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Introduce RCU_NOCB_LOCKDEP_WARN() (Čestmír Kalina) [RHEL-79879]
  - srcu: Fill out polled grace-period APIs (Čestmír Kalina) [RHEL-79879]
  - srcu: Update cleanup_srcu_struct() comment (Čestmír Kalina) [RHEL-79879]
  - srcu: Add NUM_ACTIVE_SRCU_POLL_OLDSTATE (Čestmír Kalina) [RHEL-79879]
  - tools/rcu: Add rcu-updaters.sh script (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add missing MODULE_DESCRIPTION() macros (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Fix rcu_torture_fwd_cb_cr() data race (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Make rcutorture support srcu double call test (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Remove buggy bypass lock contention mitigation (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Use kthread parking instead of ad-hoc implementation (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Fix segcblist state machine stale comments about timers (Čestmír Kalina) [RHEL-79879]
  - rcu/nocb: Fix segcblist state machine comments about bypass (Čestmír Kalina) [RHEL-79879]
  - rcu/exp: Remove redundant full memory barrier at the end of GP (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove full memory barrier on RCU stall printout (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove full memory barrier on boot time eqs sanity check (Čestmír Kalina) [RHEL-79879]
  - rcu/exp: Remove superfluous full memory barrier upon first EQS  snapshot (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove superfluous full memory barrier upon first EQS snapshot (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove full ordering on second EQS snapshot (Čestmír Kalina) [RHEL-79879]
  - rcu: Fix rcu_barrier() VS post CPUHP_TEARDOWN_CPU invocation (Čestmír Kalina) [RHEL-79879]
  - rcu: Eliminate lockless accesses to rcu_sync->gp_count (Čestmír Kalina) [RHEL-79879]
  - srcu: Disable interrupts directly in srcu_gp_end() (Čestmír Kalina) [RHEL-79879]
  - rcu: Disable interrupts directly in rcu_gp_init() (Čestmír Kalina) [RHEL-79879]
  - rcu/tree: Reduce wake up for synchronize_rcu() common case (Čestmír Kalina) [RHEL-79879]
  - rcu: Add lockdep_assert_in_rcu_read_lock() and friends (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Enable RCU priority boosting for TREE09 (Čestmír Kalina) [RHEL-79879]
  - rcu/sync: remove un-used rcu_sync_enter_start function (Čestmír Kalina) [RHEL-79879]
  - Documentation: RCU: Remove repeated word in comments (Čestmír Kalina) [RHEL-79879]
  - doc: Add refscale.lookup_instances to kernel-parameters.txt (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove references to rcu_migrate_callbacks() from diagrams (Čestmír Kalina) [RHEL-79879]
  - rcu: Describe listRCU read-side guarantees (Čestmír Kalina) [RHEL-79879]
  - Documentation: RCU: Fix section numbers after adding Section 7 in  whatisRCU.rst (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Add CONFIG_DEBUG_OBJECTS to RCU Tasks testing (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Remove obsolete parameter check from mkinitrd.sh (Čestmír Kalina) [RHEL-79879]
  - rcutorture: Remove contradictory Kconfig constraint (Čestmír Kalina) [RHEL-79879]
  - torture: Add "--no-" as synonym for "--do-no-" in torture.sh (Čestmír Kalina) [RHEL-79879]
  - torture: Make torture.sh help message match reality (Čestmír Kalina) [RHEL-79879]
  - rcu: Remove formal-verification tests (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Print grace-period kthread CPU time, if recorded (Čestmír Kalina) [RHEL-79879]
  - rcuscale: Add kfree_by_call_rcu and kfree_mult to documentation (Čestmír Kalina) [RHEL-79879]
  - checkpatch: Complain about unexpected uses of RCU Tasks Trace (Čestmír Kalina) [RHEL-79879]
  - Docs/RCU/rculist_nulls: Fix text about atomic_set_release() (Čestmír Kalina) [RHEL-79879]
  - Docs/RCU/rculist_nulls: Fix hlist_[nulls]_head field names of 'obj' (Čestmír Kalina) [RHEL-79879]
  - Docs/RCU/rculist_nulls: Specify type of the object in examples (Čestmír Kalina) [RHEL-79879]
  - Docs/RCU/rculist_nulls: Assign 'obj' before use from the examples (Čestmír Kalina) [RHEL-79879]
  - Docs/RCU/rculist_nulls: Fix trivial coding style (Čestmír Kalina) [RHEL-79879]
  - doc: Update and wordsmith rculist_nulls.rst (Čestmír Kalina) [RHEL-79879]
  - docs/RCU: Add the missing rcu_read_unlock() (Čestmír Kalina) [RHEL-79879]
  - documentation/rcu: Fix typo (Čestmír Kalina) [RHEL-79879]
  - x86/cpu/amd: Fix workaround for erratum 1054 (Michael Petlan) [RHEL-98688]
  - perf arm-spe: Dump metadata with version 2 (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Calculate meta data size (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Save per CPU information in metadata (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Use old behavior when opening old SPE files (Anubhav Shelat) [RHEL-60216]
  - tools/include: Sync arm64 headers with the kernel sources (Anubhav Shelat) [RHEL-60216]
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Add Cortex CPUs to common data source encoding list (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Add Neoverse-V2 to common data source encoding list (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Remove the unused 'midr' field (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Use metadata to decide the data source feature (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Introduce arm_spe__is_homogeneous() (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Define metadata header version 2 (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Support metadata version 2 (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Rename the common data source encoding (Anubhav Shelat) [RHEL-60216]
  - perf arm-spe: Rename arm_spe__synth_data_source_generic() (Anubhav Shelat) [RHEL-60216]
  - HID: thrustmaster: fix memory leak in thrustmaster_interrupts() (CKI Backport Bot) [RHEL-81416] {CVE-2024-57993}
  - HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints() (CKI Backport Bot) [RHEL-81416] {CVE-2024-57993}
  - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (CKI Backport Bot) [RHEL-81416] {CVE-2024-57993}
  - redhat: Mark CONFIG_RANDOMIZE_IDENTITY_BASE as disabled (Thomas Huth) [RHEL-103929]
  - s390/mm: Pin identity mapping base to zero (Thomas Huth) [RHEL-103929]
  - s390/mm: Prevent lowcore vs identity mapping overlap (Thomas Huth) [RHEL-103929]
  - powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (Eder Zulian) [RHEL-104297]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-604.el9]
changelog:
  - net: e1000e: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-99399]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99399]
  - e1000e: change k1 configuration on MTP and later platforms (Corinna Vinschen) [RHEL-99399]
  - e1000e: Fix real-time violations on link up (Corinna Vinschen) [RHEL-99399]
  - e1000e: Link NAPI instances to queues and IRQs (Corinna Vinschen) [RHEL-99399]
  - e1000e: Remove duplicated writel() in e1000_configure_tx/rx() (Corinna Vinschen) [RHEL-99399]
  - net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103029] {CVE-2025-38124}
  - scsi: storvsc: Increase the timeouts to storvsc_timeout JIRA: https://issues.redhat.com/browse/RHEL-100669 (Dexuan Cui)
  - dpll: add phase_offset_monitor_get/set callback ops (Ivan Vecera) [RHEL-105066]
  - dpll: add phase-offset-monitor feature to netlink spec (Ivan Vecera) [RHEL-105066]
  - devlink: Add new "clock_id" generic device param (Ivan Vecera) [RHEL-105064]
  - devlink: Add support for u64 parameters (Ivan Vecera) [RHEL-105064]
  - netlink: specs: devlink: replace underscores with dashes in names (Ivan Vecera) [RHEL-105064]
  - devlink: Add new "enable_phc" generic device param (Ivan Vecera) [RHEL-105064]
  - netlink: fix policy dump for int with validation callback (Ivan Vecera) [RHEL-105064]
  - devlink: use DEVLINK_VAR_ATTR_TYPE_* instead of NLA_* in fmsg (Ivan Vecera) [RHEL-105064]
  - devlink: avoid param type value translations (Ivan Vecera) [RHEL-105064]
  - devlink: define enum for attr types of dynamic attributes (Ivan Vecera) [RHEL-105064]
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103260] {CVE-2025-38250}
  - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95607]
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103158] {CVE-2025-38159}
  - wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103222] {CVE-2025-38292}
  - bnxt_en: Flush FW trace before copying to the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: fix module unload sequence (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix ethtool -d byte order for 32-bit values (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix coredump logic to free allocated buffer (Shruti Parab) [RHEL-76568]
  - bnxt_en: delay pci_alloc_irq_vectors() in the AER path (Shruti Parab) [RHEL-76568]
  - bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix ethtool selftest output in one of the failure cases (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix error handling path in bnxt_init_chip() (Shruti Parab) [RHEL-76568]
  - bnxt_en: improve TX timestamping FIFO configuration (Shruti Parab) [RHEL-76568]
  - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code (Shruti Parab) [RHEL-76568]
  - bnxt_en: Remove unused macros in bnxt_ulp.h (Shruti Parab) [RHEL-76568]
  - bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp (Shruti Parab) [RHEL-76568]
  - bnxt_en: Report the ethtool coredump length after copying the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: Change FW message timeout warning (Shruti Parab) [RHEL-76568]
  - bnxt_en: Linearize TX SKB if the fragments exceed the max (Shruti Parab) [RHEL-76568]
  - bnxt_en: Mask the bd_cnt field in the TX BD properly (Shruti Parab) [RHEL-76568]
  - bnxt_en: add .set_module_eeprom_by_page() support (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_get_module_eeprom_by_page() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update firmware interface to 1.10.3.97 (Shruti Parab) [RHEL-76568]
  - bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add devlink support for ENABLE_ROCE nvm parameter (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_hwrm_nvm_req() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add support for a new ethtool dump flag 3 (Shruti Parab) [RHEL-76568]
  - bnxt_en: Extend queue stop/start for TX rings (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor TX ring free logic (Shruti Parab) [RHEL-76568]
  - bnxt_en: Reallocate RX completion ring for TPH support (Shruti Parab) [RHEL-76568]
  - bnxt_en: Pass NQ ID to the FW when allocating RX/RX AGG rings (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor RX/RX AGG ring parameters setup for P5_PLUS (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_free_tx_rings() to free per TX ring (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor completion ring free routine (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor TX ring allocation logic (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor completion ring allocation logic for P5_PLUS chips (Shruti Parab) [RHEL-76568]
  - bnxt_en: Set NPAR 1.2 support when registering with firmware (Shruti Parab) [RHEL-76568]
  - eth: bnxt: update header sizing defaults (Shruti Parab) [RHEL-76568]
  - eth: bnxt: allocate enough buffer space to meet HDS threshold (Shruti Parab) [RHEL-76568]
  - eth: bnxt: apply hds_thrs settings correctly (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for hds-thresh ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for tcp-data-split ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for rx-copybreak ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip reading PXP registers during ethtool -d if unsupported (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (Shruti Parab) [RHEL-76568]
  - bnxt_en: Do not allow ethtool -m on an untrusted VF (Shruti Parab) [RHEL-76568]
  - bnxt_en: Use FW defined resource limits for RoCE (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix potential crash when dumping FW log coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: handle tpa_info in queue API implementation (Shruti Parab) [RHEL-76568]
  - bnxt_en: refactor bnxt_alloc_rx_rings() to call bnxt_alloc_rx_agg_bmap() (Shruti Parab) [RHEL-76568]
  - bnxt_en: refactor tpa_info alloc/free into helpers (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add FW trace coredump segments to the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add a new ethtool -W dump flag (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add 2 parameters to bnxt_fill_coredump_seg_hdr() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add functions to copy host context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Do not free FW log context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Manage the FW trace context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Allocate backing store memory for FW trace logs (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update firmware interface spec to 1.10.3.85 (Shruti Parab) [RHEL-76568]
  - bnxt_en: optimize gettimex64 (Shruti Parab) [RHEL-76568]
  - eth: bnxt: use page pool for head frags (Shruti Parab) [RHEL-76568]
  - bnxt_en: add unlocked version of bnxt_refclk_read (Shruti Parab) [RHEL-76568]
  - bnxt_en: replace PTP spinlock with seqlock (Shruti Parab) [RHEL-76568]
  - bnxt_en: cache only 24 bits of hw counter (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update bnxt.rst devlink documentation (Shruti Parab) [RHEL-76568]
  - cpufreq: tegra: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix setting policy limits when frequency tables are used (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Limit resolving a frequency to policy min/max (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Avoid using inconsistent policy->min and policy->max (Mark Langsdorf) [RHEL-83803]
  - cpufreq: cppc: Fix invalid return value in .get() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: intel_pstate: Fix hwp_get_cpu_scaling() (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Enable ITMT support after initializing core rankings (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Init cpufreq only for present CPUs (Mark Langsdorf) [RHEL-83803]
  - cpufreq: tegra186: Share policy per cluster (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Fix min_limit perf and freq updation for performance governor (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop actions in amd_pstate_epp_cpu_offline() (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Stop caching EPP (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Rework CPPC enabling (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop debug statements for policy setting (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Update cppc_req_cached for shared mem EPP writes (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Move all EPP tracing into *_update_perf and *_set_epp functions (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Cache CPPC request in shared mem case too (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Replace all AMD_CPPC_* macros with masks (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Adjust variable scope (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Run on all of the correct CPUs (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Drop SUCCESS and FAIL enums (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Allow lowest nonlinear and lowest to be the same (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Use _free macro to free put policy (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop `cppc_cap1_cached` (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Overhaul locking (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Move perf values into a union (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop min and max cached frequencies (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Show a warning when a CPU fails to setup (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Fix the clamping of perf values (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the unncecessary driver_lock in amd_pstate_update_limits (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the unnecessary cpufreq_update_policy call (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Modularize perf<->freq conversion (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Convert all perf values to u8 (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Pass min/max_limit_perf as min/max_perf to amd_pstate_update (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the redundant des_perf clamping in adjust_perf (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Modify the min_perf calculation in adjust_perf callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Remove cpufreq_enable_boost_support() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: staticize policy_has_boost_freq() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: amd: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powernv: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: vexpress: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Stop checking for duplicate available/boost freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sc520_freq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: spear: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powernow: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pmac: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qoriq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: imx6q: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: davinci: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: kirkwood: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: p4: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: omap: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: e_powersaver: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: elanfreq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pasemi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: mediatek: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: acpi: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Always create freq-table related sysfs file (Mark Langsdorf) [RHEL-83803]
  - cpufreq: bmips: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: compare kHz instead of Hz (Mark Langsdorf) [RHEL-83803]
  - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Re-sync CPU boost state on system resume (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Restrict enabling boost on policies with no boost frequencies (Mark Langsdorf) [RHEL-83803]
  - cpufreq: cppc: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: acpi: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Export cpufreq_boost_set_sw() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Introduce policy->boost_supported flag (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use str_enable_disable() helper (Mark Langsdorf) [RHEL-83803]
  - cpufreq: prevent NULL dereference in cpufreq_online() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Remove set_boost in acpi_cpufreq_cpu_init() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Introduce a more generic way to set default per-policy boost flag (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix re-boost issue after hotplugging a CPU (Mark Langsdorf) [RHEL-83803]
  - cpufreq: s3c64xx: Fix compilation warning (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use str_enable_disable()-like helpers (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Fix max-frequency computation (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Register for limit change notifications (Mark Langsdorf) [RHEL-83803]
  - cpufreq: maple: Remove maple driver (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Simplify MSR read on the boot CPU (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Fix cleanup path when boost enablement fails (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83803]
  - Revert "cpufreq: brcmstb-avs-cpufreq: Fix initial command check" (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: add virtual-cpufreq driver (Mark Langsdorf) [RHEL-83803]
  - redhat/configs: Enabled CPUFREQ_VIRT (Mark Langsdorf) [RHEL-83803]
  - cpufreq: use proper units for frequency (Mark Langsdorf) [RHEL-83803]
  - cpufreq/cppc: Use NSEC_PER_MSEC for deadline task (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix the cacography in powernv-cpufreq.c (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix warning on unused of_device_id tables for !CONFIG_OF (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Drop CONFIG_ARM and CONFIG_ARM64 dependency on Arm drivers (Mark Langsdorf) [RHEL-83803]
  - cpufreq: omap: Drop asm includes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Add explicit io.h include for readl/writel_relaxed (Mark Langsdorf) [RHEL-83803]
  - cpufreq: spear: Use of_property_for_each_u32() instead of open coding (Mark Langsdorf) [RHEL-83803]
  - redhat/configs: make ACPI_CPPC_CPUFREQ generic (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use of_property_present() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powerpc: add missing MODULE_DESCRIPTION() macros (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sti: fix build warning (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Make cpufreq_driver->exit() return void (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pcc: Remove empty exit() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: nforce2: Remove empty exit() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Mark boost policy as enabled when setting boost (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Allow drivers to advertise boost enabled (Mark Langsdorf) [RHEL-83803]
  - cpufreq: make cpufreq_boost_enabled() return bool (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sti: add missing MODULE_DEVICE_TABLE entry for stih418 (Mark Langsdorf) [RHEL-83803]
  - cpufreq: simplify boolean parsing with kstrtobool in store function (Mark Langsdorf) [RHEL-83803]
  - cpufreq: update to sysfs_emit() for safer buffer handling (Mark Langsdorf) [RHEL-83803]
  - cpufreq/cppc: Don't compare desired_perf in target() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: fix memory leaks in probe error paths (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Avoid overflow of target_freq in fast switch (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: add support for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - soc: qcom: socinfo: Add SoC ID for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - dt-bindings: arm: qcom,ids: Add SoC ID for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - powerpc: rename SPRN_HID2 define to SPRN_HID2_750FX (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix up printing large CPU numbers and frequency values (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ti: Implement scope-based cleanup in ti_cpufreq_match_node() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: Blocklist Allwinner H616/618 SoCs (Mark Langsdorf) [RHEL-83803]
  - cpupfreq: tegra124: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use a smaller freq for the policy->max when verify (Mark Langsdorf) [RHEL-83803]
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-92556]
  - x86/sev: Make sure pages are not skipped during kdump (Bandan Das) [RHEL-10019]
  - x86/sev: Do not touch VMSA pages during SNP guest memory kdump (Bandan Das) [RHEL-10019]
  - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-79685]
  - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-79685]
  - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-79685]
  - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-79685] {CVE-2025-38053}
  - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-79685 RHEL-93924]
  - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-79685]
  - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-66157 RHEL-79685 RHEL-82204]
  - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-79685 RHEL-93924] {CVE-2025-22065}
  - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-79685] {CVE-2025-22116}
  - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-79685] {CVE-2025-21890}
  - libeth: move idpf_rx_csum_decoded and idpf_rx_extracted (Michal Schmidt) [RHEL-79685]
  - idpf: record rx queue in skb for RSC packets (Michal Schmidt) [RHEL-79685]
  - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-79685]
  - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-79685]
  - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-79685 RHEL-82469] {CVE-2024-58057}
  - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-79685]
  - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-79685]
  - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-79685]
  - i2c: designware: add a new bit check for IC_CON control (John Allen) [RHEL-78660]
  - perf/x86/intel: Add Panther Lake support (Michael Petlan) [RHEL-47406 RHEL-47452]
  - perf/x86/intel: Add PMU support for Clearwater Forest (Michael Petlan) [RHEL-45093 RHEL-47454]
  - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106622] {CVE-2025-38380}
  - tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106083] {CVE-2025-38471}
  - ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-104380]
  - ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-104380]
  - ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-104380]
  - ice: wait before enabling TSPLL (Petr Oros) [RHEL-104380]
  - ice: add multiple TSPLL helpers (Petr Oros) [RHEL-104380]
  - ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-104380]
  - ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-104380]
  - ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-104380]
  - ice: add TSPLL log config helper (Petr Oros) [RHEL-104380]
  - ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-104380]
  - ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-104380]
  - ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-104380]
  - ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-104380]
  - ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-104380]
  - ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-104380]
  - ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-104380]
  - ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-104380]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-605.el9]
changelog:
  - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-91331]
  - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64457]
  - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64457]
  - mux: Add support for reading mux state from consumer DT node (Radu Rendec) [RHEL-105629]
  - mux: add support for delay after muxing (Radu Rendec) [RHEL-105629]
  - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-87983]
  - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-87983]
  - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-87983]
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-87983]
  - can: tcan4x5x: fix reset gpio usage during probe (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_close(): stop clocks after device has been shut down (Radu Rendec) [RHEL-90130]
  - can: m_can: Limit coalescing to peripheral instances (Radu Rendec) [RHEL-90130]
  - can: m_can: Reset cached active_interrupts on start (Radu Rendec) [RHEL-90130]
  - can: m_can: disable_all_interrupts, not clear active_interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Do not cancel timer from within timer (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove m_can_rx_peripheral indirection (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove coalesing disable in isr during suspend (Radu Rendec) [RHEL-90130]
  - can: m_can: Reset coalescing during suspend/resume (Radu Rendec) [RHEL-90130]
  - can: mcp251xfd: __mcp251xfd_get_berr_counter(): use CAN_BUS_OFF_THRESHOLD instead of open coding it (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_cmd_reset(): use cpu_to_le32() to assign mode (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Add support for Leaf v3 (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: support resuming from rx interrupt signal (Radu Rendec) [RHEL-90130]
  - can: m_can: allow keeping the transceiver running in suspend (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: Document the wakeup-source flag (Radu Rendec) [RHEL-90130]
  - can: m_can: remove redundant check for pm_clock_support (Radu Rendec) [RHEL-90130]
  - can: netlink: Fix TDCO calculation using the old data bittiming (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement transmit submission coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement BQL (Radu Rendec) [RHEL-90130]
  - can: m_can: Use tx_fifo_in_flight for netif_queue control (Radu Rendec) [RHEL-90130]
  - can: m_can: Introduce a tx_fifo_in_flight counter (Radu Rendec) [RHEL-90130]
  - can: m_can: Use the workqueue as queue (Radu Rendec) [RHEL-90130]
  - can: m_can: Cache tx putidx (Radu Rendec) [RHEL-90130]
  - can: m_can: Use u32 for putidx (Radu Rendec) [RHEL-90130]
  - can: m_can: Add tx coalescing ethtool support (Radu Rendec) [RHEL-90130]
  - can: m_can: Add rx coalescing ethtool support (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement transmit coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement receive coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Write transmit header and data in one transaction (Radu Rendec) [RHEL-90130]
  - can: m_can: Move hrtimer init to m_can_class_register (Radu Rendec) [RHEL-90130]
  - can: m_can: Start/Cancel polling timer together with interrupts (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Fix id2_register for tcan4553 (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): move debug message and stats after successful restart (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): reverse logic to remove need for goto (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): don't crash kernel if carrier is OK (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: m_can: change from additional- to unevaluatedProperties (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Add error messages in probe (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Add support for tcan4552/4553 (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Rename ID registers to match datasheet (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Check size of mram configuration (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Remove reserved register 0x814 from writable table (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: Add tcan4552 and tcan4553 variants (Radu Rendec) [RHEL-90130]
  - can: gs_usb: convert to NAPI/rx-offload to avoid OoO reception (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_disconnect(): remove not needed usb_kill_anchored_urbs() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_destroy_candev(): remove not needed usb_kill_anchored_urbs() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_close(): don't complain about failed device reset during ndo_stop (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_start_xmit(), gs_can_open(): clean up printouts in error path (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): make use of stats (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): make use of netdev (Radu Rendec) [RHEL-90130]
  - can: gs_usb: uniformly use "parent" as variable name for struct gs_usb (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_set_timestamp(): remove return statements form void function (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_probe(): align block comment (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove leading space from goto labels (Radu Rendec) [RHEL-90130]
  - can: Explicitly include correct DT includes, part 2 (Radu Rendec) [RHEL-90130]
  - can: peak_usb: remove unused/legacy peak_usb_netif_rx() function (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Radu Rendec) [RHEL-90130]
  - can: m_can: Add hrtimer to generate software interrupt (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Remove interrupt properties for MCAN (Radu Rendec) [RHEL-90130]
  - can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout (Radu Rendec) [RHEL-90130]
  - can: gs_usb: fix time stamp counter initialization (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): improve error handling (Radu Rendec) [RHEL-90130]
  - can: rx-offload: fix coding style (Radu Rendec) [RHEL-90130]
  - can: m_can: fix coding style (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Add len8_dlc support (Radu Rendec) [RHEL-90130]
  - can: m_can: Convert to platform remove callback returning void (Radu Rendec) [RHEL-90130]
  - can: dev: fix missing CAN XL support in can_put_echo_skb() (Radu Rendec) [RHEL-90130]
  - kvaser_usb: convert USB IDs to hexadecimal values (Radu Rendec) [RHEL-90130]
  - can: m_can: Keep interrupts enabled during peripheral read (Radu Rendec) [RHEL-90130]
  - can: m_can: Disable unused interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove double interrupt enable (Radu Rendec) [RHEL-90130]
  - can: m_can: Always acknowledge all interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove repeated check for is_peripheral (Radu Rendec) [RHEL-90130]
  - can: bittiming: can_fixup_bittiming(): set effective tq (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove gs_can::iface (Radu Rendec) [RHEL-90130]
  - can: m_can: Add check for devm_clk_get (Radu Rendec) [RHEL-90130]
  - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (Radu Rendec) [RHEL-90130 RHEL-90138] {CVE-2022-49024}
  - can: kvaser_usb: Fix possible completions during init_completion (Radu Rendec) [RHEL-90130]
  - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Radu Rendec) [RHEL-90130]
  - can: m_can: use consistent indention (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add support for reading error counters (Radu Rendec) [RHEL-90130]
  - can: gs_usb: document GS_CAN_FEATURE_GET_STATE (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add ability to enable / disable berr reporting (Radu Rendec) [RHEL-90130]
  - can: gs_usb: document GS_CAN_FEATURE_BERR_REPORTING (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): merge setting of timestamp flags and init (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): sort checks for ctrlmode (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): allow loopback and listen only at the same time (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_make_candev(): set netdev->dev_id (Radu Rendec) [RHEL-90130]
  - can: gs_usb: mention candleLight as supported device (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_handle_bus_errors(): add support for handling DLEC error on CAN-FD frames (Radu Rendec) [RHEL-90130]
  - can: m_can: is_lec_err(): clean up LEC error handling (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Remove -Warray-bounds exception (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove dma allocations (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add switchable termination support (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_make_candev(): clean up error handling (Radu Rendec) [RHEL-90130]
  - can: gs_usb: convert from usb_control_msg() to usb_control_msg_{send,recv}() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_cmd_reset(): rename variable holding struct gs_can pointer to dev (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: kvaser_usb_hydra: Use kzalloc for allocating only one element (Radu Rendec) [RHEL-90130]
  - can: rx-offload: can_rx_offload_init_queue(): fix typo (Radu Rendec) [RHEL-90130]
  - dt-binding: can: mcp251xfd: add binding information for mcp251863 (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: include common CAN controller bindings (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: fix indention of table in bosch,mram-cfg description (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: list Chandrasekar Ramakrishnan as maintainer (Radu Rendec) [RHEL-90130]
  - dt-binding: can: mcp251xfd: include common CAN controller bindings (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config (Radu Rendec) [RHEL-90130]
  - dt-bindings: can-controller: add support for termination-gpios (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Document power-domains property (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Document transceiver implementation as phy (Radu Rendec) [RHEL-90130]
  - KVM: x86: Reject KVM_SET_TSC_KHZ vCPU ioctl for TSC protected guest (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Ensure unused kvm_tdx_capabilities fields are zeroed out (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: Fix unexpected unindent warning (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Don't report base TDVMCALLs (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: Fix unexpected unindent warnings (Paolo Bonzini) [RHEL-95318]
  - KVM: selftests: Add back the missing check of MONITOR/MWAIT availability (Paolo Bonzini) [RHEL-95318]
  - KVM: x86: avoid underflow when scaling TSC frequency (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Report supported optional TDVMCALLs in TDX capabilities (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Exit to userspace for SetupEventNotifyInterrupt (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Exit to userspace for GetTdVmCallInfo (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Handle TDG.VP.VMCALL<GetQuote> (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Add new TDVMCALL status code for unsupported subfuncs (Paolo Bonzini) [RHEL-95318]
  - KVM: x86/mmu: Reject direct bits in gpa passed to KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-95318]
  - KVM: x86/mmu: Embed direct bits into gpa for KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-95318]
  - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (Maxim Levitsky) [RHEL-95318]
  - KVM: TDX: Use kvm_arch_vcpu.host_debugctl to restore the host's DEBUGCTL (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: access_tracking_perf_test: Add option to skip the sanity check (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Extract guts of THP accessor to standalone sysfs helpers (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Add a nested (forced) emulation intercept test for x86 (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Actually emit forced emulation prefix for kvm_asm_safe_fep() (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Print out the actual Top-Down Slots count on failure (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Drop the "feature event" param from guest test helpers (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Remove dead code in Intel PMU counters test (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Only validate counts for hardware-supported arch events (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Make Intel arch events globally available in PMU counters test (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Use data load to trigger LLC references/misses in Intel PMU (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Fix typos in x86's PMU counter test's macro variable use (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Assert that STI blocking isn't set after event injection (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Print the seed for the guest pRNG iff it has changed (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Add global snapshot of kvm_is_forced_emulation_enabled() (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Provide an API for getting a random bool from an RNG (Maxim Levitsky) [RHEL-95318]
  - rtmutex_api: provide correct extern functions (Maxim Levitsky) [RHEL-95318]
  - KVM: arm64: use kvm_trylock_all_vcpus when locking all vCPUs (Maxim Levitsky) [RHEL-95318]
  - x86: KVM: SVM: use kvm_lock_all_vcpus instead of a custom implementation (Maxim Levitsky) [RHEL-95318]
  - KVM: add kvm_lock_all_vcpus and kvm_trylock_all_vcpus (Maxim Levitsky) [RHEL-95318]
  - locking/mutex: implement mutex_lock_killable_nest_lock (Maxim Levitsky) [RHEL-95318]
  - locking/mutex: implement mutex_trylock_nested (Maxim Levitsky) [RHEL-95318]
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Add Idle HLT intercept support (Maxim Levitsky) [RHEL-95318]
  - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept (Maxim Levitsky) [RHEL-95318]
  - KVM: SEV: Use long-term pin when registering encrypted memory regions (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Synthesize nested VM-Exit for supported emulation intercepts (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Allow the caller to provide instruction length on nested VM-Exit (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Add a #define for the architectural max instruction length (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Plumb the emulator's starting RIP into nested intercept checks (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Plumb the src/dst operand types through to .check_intercept() (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Consolidate missing X86EMUL_INTERCEPTED logic in L2 emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Emulate HLT in L2 if it's not intercepted (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Allow emulating RDPID on behalf of L2 (Maxim Levitsky) [RHEL-95318]
  - KVM: nSVM: Pass next RIP, not current RIP, for nested VM-Exit on emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Check PAUSE_EXITING, not BUS_LOCK_DETECTION, on PAUSE emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/cpuid: add type suffix to decimal const 48 fix building warning (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Clear pv_unhalted on all transitions to KVM_MP_STATE_RUNNABLE (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Introduce kvm_set_mp_state() (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Wake vCPU for PIC interrupt injection iff a valid IRQ was found (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Snapshot the host's DEBUGCTL in common x86 (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow (Maxim Levitsky) [RHEL-95318]
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU (Maxim Levitsky) [RHEL-95318]
  - KVM: Drop hack that "manually" informs lockdep of kvm->lock vs. vcpu->mutex (Maxim Levitsky) [RHEL-95318]
  - KVM: Don't BUG() the kernel if xa_insert() fails with -EBUSY (Maxim Levitsky) [RHEL-95318]
  - Revert "KVM: Fix vcpu_array[0] races" (Maxim Levitsky) [RHEL-95318]
  - KVM: Grab vcpu->mutex across installing the vCPU's fd and bumping online_vcpus (Maxim Levitsky) [RHEL-95318]
  - KVM: Verify there's at least one online vCPU when iterating over all vCPUs (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Disable AVIC on SNP-enabled system without HvInUseWrAllowed feature (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: fix canonical check of vmcs12 HOST_RIP (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: model canonical checks more precisely (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky) [RHEL-95318]
  - x86/tdx: mark tdh_vp_enter() as __flatten (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: use __always_inline for is_td_vcpu and is_td (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Revert kvm_x86_ops.mem_enc_ioctl() back to an OPTIONAL hook (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Use kvm_x86_call() instead of manual static_call() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Check that the high 32bits are clear in kvm_arch_vcpu_ioctl_run() (Paolo Bonzini) [RHEL-15711]
  - RHEL: add debugging info for TDX module initialization (Paolo Bonzini) [RHEL-15711]
  - Documentation/virt/kvm: Document on Trust Domain Extensions (TDX) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Make TDX VM type supported (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: KVM: TDX: Always honor guest PAT on TDX enabled guests (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: remove shadow_memtype_mask (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce supported_quirks to block disabling quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Allow vendor code to disable quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: do not allow re-enabling quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enable guest access to MTRR MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a method to ignore hypercall patching (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Ignore setting up mce (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore accesses to TSC (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore VMX preemption timer (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add method to ignore guest instruction emulation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore accesses to CPU state (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<GetTdVmCallInfo> hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enable guest access to LMCE related MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV rdmsr/wrmsr hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement callbacks for MSR operations (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move KVM_MAX_MCE_BANKS to header file (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV HLT hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV CPUID hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Kick off vCPUs when SEAMCALL is busy during TD page removal (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Retry locally in TDX EPT violation handler on RET_PF_RETRY (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Detect unexpected SEPT violations due to pending SPTEs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EPT violation/misconfig exit (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EXIT_REASON_OTHER_SMI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EXCEPTION_NMI and EXTERNAL_INTERRUPT (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Add a helper for NMI handling (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move emulation_required to struct vcpu_vt (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore virtual apic related operation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Force APICv active for TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enforce KVM_IRQCHIP_SPLIT for TDX guests (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Always block INIT/SIPI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle SMI request as !CONFIG_KVM_SMM (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement methods to inject NMI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Wait lapic expire when timer IRQ was injected (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Assume timer IRQ was injected if APIC state is protected (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement non-NMI interrupt injection (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move posted interrupt delivery code to common header (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Disable PI wakeup for IPIv (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add support for find pending IRQ in a protected local APIC (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV MMIO hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV port I/O hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<ReportFatalError> (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<MapGPA> (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle KVM hypercall with TDG.VP.VMCALL (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a place holder for handler of TDX hypercalls (TDG.VP.VMCALL) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a place holder to handle TDX VM exit (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move pv_unhalted check out of kvm_vcpu_has_events() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Have ____kvm_emulate_hypercall() read the GPRs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a switch_db_regs flag to handle TDX's auto-switched behavior (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Save and restore IA32_DEBUGCTL (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Disable support for TSX and WAITPKG (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: restore user ret MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Allow to update cached values in kvm_user_return_msrs w/o wrmsr (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: restore host xsave state when exit from the guest TD (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: vcpu_run: save/restore host state(host kernel gs) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement TDX vcpu enter/exit path (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move common fields of struct vcpu_{vmx,tdx} to a struct (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrapper to enter/exit TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle SEPT zap error due to page add error in premap (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Skip updating CPU dirty logging request for TDs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Make cpu_dirty_log_size a per-VM value (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add parameter "kvm" to kvm_mmu_page_ad_need_write_protect() (Paolo Bonzini) [RHEL-15711]
  - KVM: Add parameter "kvm" to kvm_cpu_dirty_log_size() and its callers (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle vCPU dissociation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Finalize VM initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add an ioctl to create initial guest memory (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Export kvm_tdp_map_page() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Bail out kvm_tdp_map_page() when VM dead (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement hook to get max mapping level of private pages (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement hooks to propagate changes of TDP MMU mirror page table (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TLB tracking for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Set per-VM shadow_mmio_value to 0 (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add setter for shadow_mmio_value (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Require TDP MMU, mmio caching and EPT A/D bits for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Set gfn_direct_bits to shared bit (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add load_mmu_pgd method for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add accessors VMX VMCS helpers (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Teach EPT violation helper about private mem (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Split out guts of EPT violation to common/exposed function (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Do not enable page track for TD guest (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Implement memslot deletion for TDX (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TD measurement of initial contents (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to remove a TD private page (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to manage TDX TLB tracking (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to add TD private pages (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrapper tdh_mem_sept_add() to add SEPT pages (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Register TDX host key IDs to cgroup misc controller (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Taking guest pa into consideration when calculate tdp level (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce KVM_TDX_GET_CPUID (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Do TDX specific vcpu initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: create/free TDX vcpu structure (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Don't offline the last cpu of one package when there's TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Make pmu_intel.c ignore guest TD case (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: add ioctl to initialize VM with TDX specific parameters (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: expose cpuid_entry2_find for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Support per-VM KVM_CAP_MAX_VCPUS extension check (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: create/destroy VM structure (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Get system-wide info about TDX module on initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add place holder for TDX VM specific mem_enc_op ioctl (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add helper functions to print TDX SEAMCALL error (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add TDX "architectural" error codes (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Define TDX architectural definitions (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add placeholders for TDX VM/vCPU structures (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Get TDX global information (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Initialize TDX during KVM module load (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Refactor VMX module init/exit functions (Paolo Bonzini) [RHEL-15711]
  - KVM: Export hardware virtualization enabling/disabling functions (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add tdx_guest_keyid_alloc/free() to alloc and free TDX guest KeyID (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Read essential global metadata for KVM (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: allocate tdx_sys_info in static memory (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX flush operations (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX VM/vCPU field access (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX page cache management (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX vCPU creation (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX TD creation (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX KeyID management (Paolo Bonzini) [RHEL-15711]
  - selftests: kvm: revamp MONITOR/MWAIT tests (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add infrastructure for secure TSC (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Push down setting vcpu.arch.user_set_tsc (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: move vm_destroy callback at end of kvm_arch_destroy_vm (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Prevent aliased memslot GFNs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Don't zap valid mirror roots in kvm_tdp_mmu_zap_all() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take root types for kvm_tdp_mmu_invalidate_all_roots() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate tearing down mirror page tables (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate building mirror page tables (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate attr_filter to MMU notifier callbacks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Support mirror root for TDP MMU (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take root in tdp_mmu_for_each_pte() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Introduce KVM MMU root types to specify page table type (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Extract root invalid check from tdx_mmu_next_root() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Support GFN direct bits (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take struct kvm in iter loops (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Make kvm_tdp_mmu_alloc_root() return void (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add an is_mirror member for union kvm_mmu_page_role (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add an external pointer to struct kvm_mmu_page (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a VM type define for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: Add member to struct kvm_gfn_range to indicate private/shared (Paolo Bonzini) [RHEL-15711]
  - x86/irq: Remove bitfields in posted interrupt descriptor (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Dedup fastpath MSR post-handling logic (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (Paolo Bonzini) [RHEL-15711]
  - KVM: nVMX: Process events on nested VM-Exit if injectable IRQ or NMI is pending (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Free vCPUs before freeing VM state (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: update amd-memory-encryption.rst references (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Modify NMI and INTR handlers to take intr_info as function argument (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Drop support for forcing UC memory when guest CR0.CD=1 (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Remove VMX support for virtualizing guest MTRR memtypes (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add fastpath handling of HLT VM-Exits (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Reorganize code in x86.c to co-locate vCPU blocking/running helpers (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Zap invalid roots with mmu_lock holding for write at uninit (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Refactor __kvm_emulate_hypercall() into a macro (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Always complete hypercall via function callback (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Bump hypercall stat prior to fully completing hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move "emulate hypercall" function declarations to x86.h (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a helper to check for user interception of KVM hypercalls (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: clear vcpu->run->hypercall.ret before exiting for KVM_EXIT_HYPERCALL (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Remove hwapic_irr_update() from kvm_x86_ops (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: don't fall through case statements without annotations (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Only advertise KVM_CAP_READONLY_MEM when supported by VM (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Disallow read-only memslots for SEV-ES and SEV-SNP (and TDX) (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Return RET_PF* instead of 1 in kvm_mmu_page_fault() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Treat TDP MMU faults as spurious if access is already allowed (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Don't overwrite shadow-present MMU SPTEs when prefaulting (Paolo Bonzini) [RHEL-15711]
  - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-104899]
  - xfs: do not check NEEDSREPAIR if ro,norecovery mount. (Pavel Reichl) [RHEL-101639]
  - iavf: fix reset_task for early reset event (Michal Schmidt) [RHEL-83572]
  - iavf: add support for Rx timestamps to hotpath (Michal Schmidt) [RHEL-83572]
  - iavf: handle set and get timestamps ops (Michal Schmidt) [RHEL-83572]
  - iavf: periodically cache PHC time (Michal Schmidt) [RHEL-83572]
  - iavf: add support for indirect access to PHC time (Michal Schmidt) [RHEL-83572]
  - iavf: add initial framework for registering PTP clock (Michal Schmidt) [RHEL-83572]
  - iavf: negotiate PTP capabilities (Michal Schmidt) [RHEL-83572]
  - iavf: Implement checking DD desc field (Michal Schmidt) [RHEL-83572]
  - iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors (Michal Schmidt) [RHEL-83572]
  - iavf: add support for negotiating flexible RXDID format (Michal Schmidt) [RHEL-83572]
  - iavf: define Rx descriptors as qwords (Michal Schmidt) [RHEL-83572]
  - iavf: allow changing VLAN state without calling PF (Michal Schmidt) [RHEL-83572]
  - iavf: Remove unused declarations (Michal Schmidt) [RHEL-83572]
  - iavf: add support to exchange qos capabilities (Michal Schmidt) [RHEL-83572]
  - iavf: Add net_shaper_ops support (Michal Schmidt) [RHEL-83572]
  - iavf: switch to Page Pool (Michal Schmidt) [RHEL-83572]
  - iavf: pack iavf_ring more efficiently (Michal Schmidt) [RHEL-83572]
  - iavf: drop page splitting and recycling (Michal Schmidt) [RHEL-83572]
  - block: use plug request list tail for one-shot backmerge attempt (Ming Lei) [RHEL-96295]
  - drm/nouveau/nvkm: introduce new GSP reply policy NVKM_GSP_RPC_REPLY_POLL (Robert Foss) [RHEL-91332]
  - drm/nouveau/nvkm: factor out current GSP RPC command policies (Robert Foss) [RHEL-91332]
  - redhat: add drm_atomic_state_test to mod-internal.list (Robert Foss) [RHEL-91332]
  - accel/ivpu: Don't convert symbol namespace to string literal (Robert Foss) [RHEL-91332]
  - xe: Don't select CONFIG_DRM_GPUSVM (Robert Foss) [RHEL-91332]
  - drm: xe: Include linux/nospec.h (Robert Foss) [RHEL-91332]
  - drm: Use old __assign_str function definition (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: Add cgroups implementation" (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux" (Robert Foss) [RHEL-91332]
  - Revert "drm/i915: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/amd/display: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/sysfs: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - drm: Move for_each_if() to util_macros.h for wider use (Robert Foss) [RHEL-91332]
  - redhat/configs: Add new configs from drm 6.15 backport (Robert Foss) [RHEL-91332]
  - Merge DRM changes from upstream v6.14..v6.15 (Robert Foss) [RHEL-91332]
  - udp: Fix memory accounting leak. (Xin Long) [RHEL-104094] {CVE-2025-22058}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-606.el9]
changelog:
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104271] {CVE-2025-38211}
  - NFS: Return the file btime in the statx results when appropriate (Benjamin Coddington) [RHEL-90990]
  - nfs: Add timecreate to nfs inode (Benjamin Coddington) [RHEL-90990]
  - Expand the type of nfs_fattr->valid (Benjamin Coddington) [RHEL-90990]
  - perf/x86/intel: Support RDPMC metrics clear mode (Michael Petlan) [RHEL-47448]
  - igc: fix lock order in igc_ptp_reset (Corinna Vinschen) [RHEL-83575]
  - igc: set the RX packet buffer size for TSN mode (Corinna Vinschen) [RHEL-83575]
  - igc: use FIELD_PREP and GENMASK for existing RX packet buffer size (Corinna Vinschen) [RHEL-83575]
  - igc: optimize TX packet buffer utilization for TSN mode (Corinna Vinschen) [RHEL-83575]
  - igc: use FIELD_PREP and GENMASK for existing TX packet buffer size (Corinna Vinschen) [RHEL-83575]
  - igc: rename I225_RXPBSIZE_DEFAULT and I225_TXPBSIZE_DEFAULT (Corinna Vinschen) [RHEL-83575]
  - igc: rename xdp_get_tx_ring() for non-xdp usage (Corinna Vinschen) [RHEL-83575]
  - igc: enable HW vlan tag insertion/stripping by default (Corinna Vinschen) [RHEL-83575]
  - igc: add lock preventing multiple simultaneous PTM transactions (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: cleanup PTP module if probe fails (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: handle the IGC_PTP_ENABLED flag correctly (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: move ktime snapshot into PTM retry loop (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: increase wait time before retrying PTM (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: fix PTM cycle trigger logic (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-83575]
  - igc: Fix XSK queue NAPI ID mapping (Corinna Vinschen) [RHEL-83575]
  - igc: Set buffer type for empty frames in igc_init_empty_frame (Corinna Vinschen) [RHEL-83575]
  - igc: Fix HW RX timestamp when passed by ZC XDP (Corinna Vinschen) [RHEL-83575]
  - igc: Avoid unnecessary link down event in XDP_SETUP_PROG process (Corinna Vinschen) [RHEL-83575]
  - igc: Link queues to NAPI instances (Corinna Vinschen) [RHEL-83575]
  - igc: Link IRQs to NAPI instances (Corinna Vinschen) [RHEL-83575]
  - igc: Fix passing 0 to ERR_PTR in igc_xdp_run_prog() (Corinna Vinschen) [RHEL-83575]
  - igc: Allow hot-swapping XDP program (Corinna Vinschen) [RHEL-83575]
  - igc: return early when failing to read EECD register (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_read/write_pcie_cap_reg (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_read/write_pci_cfg wrappers (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_acquire/release_nvm (Corinna Vinschen) [RHEL-83575]
  - igc: remove autoneg parameter from igc_mac_info (Corinna Vinschen) [RHEL-83575]
  - igc: fix build errors for PTP (Corinna Vinschen) [RHEL-83575]
  - ixgbe: add support for FW rollback mode (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 implementation of FW recovery mode (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add FW API version check (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add support for devlink reload (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add device flash update via devlink (Corinna Vinschen) [RHEL-99401]
  - ixgbe: extend .info_get() with stored versions (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 functions getting PBA and FW ver info (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add .info_get extension specific for E610 devices (Corinna Vinschen) [RHEL-99401]
  - ixgbe: read the netlist version information (Corinna Vinschen) [RHEL-99401]
  - ixgbe: read the OROM version information (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 functions for acquiring flash data (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add handler for devlink .info_get() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add initial devlink support (Corinna Vinschen) [RHEL-99401]
  - ixgbe: wrap netdev_priv() usage (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Fix unreachable retry logic in combined and byte I2C write functions (Corinna Vinschen) [RHEL-99401]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: fix media type detection for E610 device (Corinna Vinschen) [RHEL-86539 RHEL-99401]
  - ixgbe: add support for thermal sensor event reception (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add PTP support for E610 device (Corinna Vinschen) [RHEL-99401]
  - ixgbe: fix media cage present detection for E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Fix possible skb NULL pointer dereference (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Fix passing 0 to ERR_PTR in ixgbevf_run_xdp() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Fix passing 0 to ERR_PTR in ixgbe_run_xdp() (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Remove unused ixgbevf_hv_mbx_ops (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Add support for Intel(R) E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - PCI: Add PCI_VDEVICE_SUB helper macro (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Enable link management in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Clean up the E610 link management related code (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add ixgbe_x540 multiple header inclusion protection (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for EEPROM dump in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for NVM handling in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add link management support for E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for E610 device capabilities detection (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for E610 FW Admin Command Interface (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Correct BASE-BX10 compliance code (Corinna Vinschen) [RHEL-99401]
  - ixgbe: downgrade logging of unsupported VF API version to debug (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Break include dependency cycle (Corinna Vinschen) [RHEL-99401]
  - arch: x86: add IPC mailbox accessor function and add SoC register access (CKI Backport Bot) [RHEL-107008]
  - ASoC: SDCA: Allow read-only controls to be deferrable (Jaroslav Kysela) [RHEL-101627]
  - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Fixup some kernel doc errors (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Add missing default in switch in entity_pde_event() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Update memory allocations to zero initialise (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix mute LED mask on HP OMEN 16 laptop (Jaroslav Kysela) [RHEL-101627]
  - sof-client-ipc-flood-test: don't mess with ->d_name (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA (Jaroslav Kysela) [RHEL-101627]
  - ALSA: compress_offload: tighten ioctl command number checks (Jaroslav Kysela) [RHEL-101627]
  - soundwire: Revert "soundwire: qcom: Add set_channel_map api support" (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38486}
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r0xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add quirks for some Clevo laptops (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 6 G1a (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: rt721-sdca: fix boost gain calculation error (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38438}
  - ASoC: Intel: sof-function-topology-lib: Print out the unsupported dmic count (Jaroslav Kysela) [RHEL-101627]
  - ASoC: fsl_sai: Force a software reset when starting in consumer mode (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fb2xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38454}
  - ASoC: cs35l56: probe() should fail if the device ID is not recognized (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: soc-acpi-intel-arl-match: set get_function_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: add sof_sdw_get_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: soc-acpi: add get_function_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select SND_SOC_ACPI_INTEL_MATCH (Jaroslav Kysela) [RHEL-101627]
  - ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: update quirk data for HP Victus (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic (Jaroslav Kysela) [RHEL-101627]
  - ALSA: sb: Force to disable DMAs once when DMA mode is changed (Jaroslav Kysela) [RHEL-101627]
  - ALSA: sb: Don't allow changing the DMA mode during operations (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38249}
  - ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38259}
  - ASoC: codec: wcd9335: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Add new pci id for AMD GPU display HD audio controller (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Ignore unsol events for cards being shut down (Jaroslav Kysela) [RHEL-101627]
  - ASoC: rt1320: fix speaker noise when volume bar is 100% (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: add check for status update registers (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: fix for clearing command status register (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: ps: fix for soundwire failures during hibernation exit sequence (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: serialize amd manager resume sequence during pm_prepare (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: fix for handling slave alerts after link is down (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add quirk for Asus GU605C (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP Victus 15-fa1xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tegra210_ahub: Add check to of_device_get_match_data() (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios laptops (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add support for Acer Helios Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-101627]
  - ASoC: intel/sdw_utils: Assign initial value in asoc_sdw_rt_amp_spk_rtd_init() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd937x: Drop unused buck_supply (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd9375: Fix double free of regulator supplies (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38423}
  - ASoC: amd: sof_amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Jaroslav Kysela) [RHEL-101627]
  - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Verify content returned by parse_int_array() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38307}
  - ASoC: Intel: avs: Relocate DSP status registers (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Read HW capabilities when possible (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Ignore Vendor-space manipulation for ACE (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Fix PPLCxFMT calculation (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: PCM operations for LNL-based platforms (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Allow to fetch hlink by ID (Jaroslav Kysela) [RHEL-101627]
  - soundwire: only compute port params in specific stream states (Jaroslav Kysela) [RHEL-101627]
  - ALSA: core: fix up bus match const issues. (Jaroslav Kysela) [RHEL-101627]
  - ASoC: apple: mca: Constrain channels according to TDM mask (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: amd: add missing acp descriptor field (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2764: Enable main IRQs (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2764: Reinit cache on part reset (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: hda: Fix RPM usage count underflow (Jaroslav Kysela) [RHEL-101627]
  - ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108151] {CVE-2025-38417}
  - i40e: When removing VF MAC filters, only check PF-set MAC (Jamie Bainbridge) [RHEL-98540]
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107693]
  - cpuidle: Init cpuidle only for present CPUs (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Update documentation after get_typical_interval() changes (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Update documentation after previous changes (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Avoid discarding useful information (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Eliminate outliers on both ends of the sample set (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Tweak threshold use in get_typical_interval() (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Use one loop for average and variance computations (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Drop a redundant local variable (Mark Langsdorf) [RHEL-87863]
  - cpuidle: psci: Add trace for PSCI domain idle (Mark Langsdorf) [RHEL-87863]
  - cpuidle: psci: Activate GENPD_FLAG_ACTIVE_WAKEUP with OSI (Mark Langsdorf) [RHEL-87863]
  - powerpc/machdep: Drop include of dma-mapping.h (Mark Langsdorf) [RHEL-87863]
  - cpuidle: Correct some typos in comments (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Remove iowait influence (Mark Langsdorf) [RHEL-87863]
  - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (John Meneghini) [RHEL-41080]
  - net: add helpers for EEE configuration (CKI Backport Bot) [RHEL-107009]
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CKI Backport Bot) [RHEL-93557] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (CKI Backport Bot) [RHEL-93557] {CVE-2025-22121}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-607.el9]
changelog:
  - drm/vmwgfx: Fix guests running with TDX/SEV (Jocelyn Falempe) [RHEL-108036]
  - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Benjamin Coddington) [RHEL-99742]
  - Squashfs: sanity check symbolic link size (CKI Backport Bot) [RHEL-59303] {CVE-2024-46744}
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101247] {CVE-2025-38085}
  - mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101283] {CVE-2025-38084}
  - mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101283]
  - net/mlx5: Reset bw_share field when changing a node's parent (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - IB/mlx5: Fix potential deadlock in MR deregistration (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix number of lanes to UNKNOWN when using data_rate_oper (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-94893]
  - net/mlx5e: Disable MACsec offload for uplink representor profile (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-switch, Fix error handling for enabling roce (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TC, Continue the attr process even if encap entry is invalid (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Use custom tunnel header for vxlan gbp (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Move ttc allocation after switch case to prevent leaks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-37888}
  - RDMA/mlx5: Fix compilation warning when USER_ACCESS isn't set (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - treewide: Switch/rename to timer_delete[_sync]() (mlx5) (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Make reserved size independent of page size (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix calculation of total invalidated pages (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-22086}
  - RDMA/mlx5: Fix page_size variable overflow (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83386 RHEL-99321] {CVE-2025-22091}
  - RDMA/mlx5: Drop access_flags from _mlx5_mr_cache_alloc() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix cache entry update on dereg error (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix MR cache initialization error flow (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support optional-counters binding for QPs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Compile fs.c regardless of INFINIBAND_USER_ACCESS config (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Add optional counters for RDMA_TX/RX_packets/bytes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Expose RDMA TRANSPORT flow table types to userspace (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Check enabled UCAPs when creating ucontext (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Create UCAP char devices for supported device capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Reorder capability check last (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Start health poll after enable hca (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, reload representors on LAG creation failure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix ethtool -N flow-type ip4 to RSS context (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TC, Don't offload CT commit if it's the last action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Filter legacy rules that are unrelated to nic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Update pfnum retrieval for devlink port attributes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fw reset, check bridge accessibility at earlier stage (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Lag, use port selection tables when available (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TX, Utilize WQ fragments edge for multi-packet WQEs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Always select CONFIG_PAGE_POOL_STATS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Use right API to free bitmap memory (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove NULL check before dev_{put, hold} (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Expose port reset cycle recovery counter via ethtool (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Get counter group size by FW capability (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Access PHY layer counter group as other counter groups (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Ensure each counter group uses its PCAM bit (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, log the unsupported mask in definer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, use list_move() instead of del/add (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove unused code for alias flow tables (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for setting parent of nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Preserve rate settings when creating a rate node (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce hierarchy level tracking on scheduling nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename devlink rate parent set function for leaf nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for dest flow sampler HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for flow meters HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add API for sharing HWS action by refcount (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add IFC bits for PPCNT recovery counters group (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add RDMA TRANSPORT steering domain support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Query ADV_RDMA capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Limit non-privileged commands (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Allow the throttle mechanism to be more dynamic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add RDMA_CTRL HW capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Avoid unnecessary use of comma operator (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Properly match IPsec subnet addresses (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Separate address related variables to be in struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Lag, Enable Multiport E-Switch offloads on 8 ports LAG (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Enable lanes configuration when auto-negotiation is off (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor link speed handling with mlx5_link_info struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Relocate function declarations from port.h to mlx5_core.h (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add trust lockdown error to health syndrome print function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Expose crr in health buffer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Log health buffer data on any syndrome (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Avoid report two health errors on same syndrome (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove newline at the end of a netlink error message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Avoid a hundred -Wflex-array-member-not-at-end warnings (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Change POOL_NEXT_SIZE define value and make it global (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add new health syndrome error and crr bit offset (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Symmetric OR-XOR RSS hash control (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Use secs_to_jiffies() instead of msecs_to_jiffies() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Support RX xfrm state selector's UPSPEC for packet offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add pass flow group for IPSec RX status table (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add num_reserved_entries param for ipsec_ft_create() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Skip IPSec RX policy check for crypto offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Move IPSec policy check after decryption (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Change the destination of IPSec RX SA miss rule (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add helper function to update IPSec default destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Separate extended link modes request from link modes type selection (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Change eth_proto parameter naming (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Introduce ptys2ethtool_process_link() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Refactor ptys2ethtool_adver_link() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Bridge, correct config option description (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add sensor name to temperature event message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Prefix temperature event bitmap with '0x' for clarity (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Apply rate-limiting to high temperature warning (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: XDP, Enable TX side XDP multi-buffer support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Expose RSS via devlink rx reporter diagnose (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add direct TIRs to devlink rx reporter diagnose (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Move RQs diagnose to a dedicated function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Expose ICM consumption per function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename and move mlx5_esw_query_vport_vhca_id (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: set the tx_queue_len for pfifo_fast (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: reduce rep rxq depth to 256 for ECPF (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: reduce the max log mpwrq sz for ECPF and reps (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Remove unused mlx5e_tc_flow_action struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove stray semicolon in LAG port selection table creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Support FEC settings for 200G per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for 200Gbps per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add devcom component for the clock shared by functions (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Remove unused mlx5dr_domain_sync (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Bridge, fix the crash caused by LAG state check (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21970}
  - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, Rightsize bwc matcher priority (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, use the right action structs for STEv3 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: handle errors in mlx5_chains_create_table() (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21975}
  - net/mlx5: Fill out devlink dev info only for PFs (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-93397]
  - net/mlx5: IRQ, Fix null string in debug print (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Restore missing trace event when enabling vport QoS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix vport QoS cleanup on error (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21882}
  - RDMA/mlx5: Fix bind QP error cleanup flow (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix AH static rate parsing (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - IB/mlx5: Set and get correct qp_num for a DCT QP (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix the recovery flow of the UMR QP (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21892}
  - net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21717}
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21732}
  - RDMA/mlx5: Fix indirect mkey ODP page count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix link status down event for MPV (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Handle link status event only for LAG device (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Extend ODP statistics with operation count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fix unintentional sign extension on shift of dest_attr->vport.vhca_id (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Offload connections with hardware steering rules (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Make mlx5_ct_fs_smfs_ct_validate_flow_rule reusable (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Add initial support for Hardware Steering (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, rework the check if matcher size can be increased (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add nic_cap_reg and vhca_icm_ctrl registers (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: SHAMPO: Introduce new SHAMPO specific HCA caps (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Update mlx5_ifc to support FEC for 200G per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, update flow - support through bigger action RTC (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, update flow - remove the use of dual RTCs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS to steering mode options (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS get capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, set create match definer to not supported by HWS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for dest vport HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS fte API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add dest table cache (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, manage flow counters HWS action sharing by refcount (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS modify header API function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS packet reformat API function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS actions pool (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS flow group API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS flow table API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS root namespace functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update TX ESN context for IPSec hardware offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: use do_aux_work for PHC overflow checks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, set timeout on polling for completion (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, support flow sampler destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, use the right size when writing arg data (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, handle returned error value in pool alloc (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21800}
  - net/mlx5: HWS, separate SQ that HWS uses from the usual traffic SQs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, num_of_rules counter on matcher should be atomic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, reduce memory consumption of a matcher struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove wrong deletion of the miss table list (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, change error flow on matcher disconnect (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21751}
  - net/mlx5: HWS, add error message on failure to move rules (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, simplify allocations as we support only FDB (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, denote how refcounts are protected (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove implementation of unused FW commands (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove the use of duplicated structs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, Add support for RDMA RX steering over IB link layer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove PTM support log message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, add support for ConnectX-8 steering (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, expand SWS STE callbacks and consolidate common structs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, do not initialize native API queues (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, no need to expose mlx5hws_send_queues_open/close (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, retry insertion to hash table on EBUSY (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add mlx5_fs_pool API (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add counter object to flow destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, Support LAG over Multi-Host NICs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, Refactor lag logic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Report rx_discards_phy via rx_dropped (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add device cap abs_native_port_num (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Add ifc support for cross-esw scheduling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for new scheduling elements (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add ConnectX-8 device to ifc (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: ifc: Reorganize mlx5_ifc_flow_table_context_bits (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Always start IPsec sequence number from 1 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Rely on reqid in IPsec tunnel mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21674}
  - net/mlx5: Clear port select structure when fail to create (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21675}
  - net/mlx5: SF, Fix add port error handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix a lockdep warning as part of the write combining test (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix RDMA TX steering prio (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix variable not being completed when function returns (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21662}
  - net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Skip restore TC rules for vport rep without loaded flag (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2024-57801}
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, select MSIX vector 0 for completion queue creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Enable multiplane mode only when it is supported (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, prevent potential error pointer dereference (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2024-56660}
  - net/mlx5: E-Switch, Fix switching to switchdev mode in MPV (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-Switch, Fix switching to switchdev mode with IB device disabled (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Add implementation for ufile_hw_cleanup device operation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support querying per-plane IB PortCounters (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support OOO RX WQE consumption (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce data placement ordering bits (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Rework header allocation loop (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Drop info array (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Change frag page setup order during allocation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Fix page_index calculation inconsistency (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Simplify UMR allocation for headers (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Make vport QoS enablement more flexible for future extensions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Integrate esw_qos_vport_enable logic into rate operations (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize scheduling element operations (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor scheduling element configuration bitmasks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize max_rate and min_rate setting for nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Simplify QoS normalization by removing error handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-switch, refactor eswitch mode change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: deduplicate {mlx5_,}eq_update_ci() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: relax memory barrier in eq_update_ci() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: Schedule EQ comp tasklet only if necessary (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: do not create xdp_redirect for non-uplink rep (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: move XDP_REDIRECT sq to dynamic allocation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, renamed the files in accordance with naming convention (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, moved all the SWS code into a separate directory (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rework esw qos domain init and cleanup (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DPLL, Add clock quality level op implementation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5: simplify EQ interrupt polling logic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5: fix typo in "mlx5_cqwq_get_cqe_enahnced_comp" (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update features on ring size change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update features on MTU change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: unique names for per device caches (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, rename modify header struct member action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, rename packet reformat struct member action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Only create VEPA flow table when in VEPA mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add sync reset drop mode support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize QoS operations for nodes and vports (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Simplify QoS scheduling element configuration (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove vport QoS enabled flag (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor vport QoS to use scheduling node structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor vport scheduling element creation function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce node struct and rename group terminology to node (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename vport QoS group reference to parent (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Restrict domain list insertion to root TSAR ancestors (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add parent group support in rate group structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce node type to rate group structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor QoS group scheduling element creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support check for TSAR types in QoS scheduling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Unify QoS element type checks across NIC and E-Switch (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Refactor locking to a qos domain mutex (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Store rate groups in a qos domain (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Rename rate group 'list' as 'parent_entry' (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Add an explicit 'dev' to vport trace calls (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Store the eswitch in a mlx5_esw_rate_group (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Drop 'esw' param from vport qos functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Always create group0 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Maintain rate group vport members in a list (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Refactor and document bw_share calculation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Consistently name vport vars as 'vport' (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Rename vport 'tsar' into 'sched_elem'. (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Flesh out element_attributes in mlx5_ifc.h (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Remove mlx5_fc_create_ex (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Don't maintain a counter count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Drop unneeded cacheline alignment (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Replace IDR+lists with xarray (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Use kvmalloc for bulk query buffer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Make fc_stats & fc_pool private (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - perf script: perf script tests fails with segfault (Jakub Brnak) [RHEL-71129]
  - tracing/kprobes: Check whether get_kretprobe() returns NULL in kretprobe_dispatcher() (Jerome Marchand) [RHEL-101938]
  - treewide: Switch/rename to timer_delete[_sync]() (mlx4) (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: select PAGE_POOL (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: use the page pool for Rx buffers (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: remove the local XDP fast-recycling ring (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: don't try to complete XDP frames in netpoll (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: create a page pool for Rx (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - net/mlx4_core: Avoid impossible mlx4_db_alloc() order value (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - mlx4: Remove unused functions (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Support report_port_event() ops (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Use DMA iterator to write MTT (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Use ib_umem_find_best_pgsz() to calculate MTT size (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-109507]
  - smb3: fix for slab out of bounds on mount to ksmbd (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-109507]
  - smb: convert to ctime accessor functions (Paulo Alcantara) [RHEL-109507]
  - cifs: Fix null-ptr-deref by static initializing global lock (Paulo Alcantara) [RHEL-109507]
  - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-109507]
  - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-109507]
  - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix creating symlinks under POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb: client: default to nonativesocket under POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb: client: set symlink type as native for POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb3 client: add way to show directory leases for improved debugging (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing iocharset mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing domain mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing pass2 mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing pass mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing user mount option (Paulo Alcantara) [RHEL-109507]
  - cifs: Add support for creating reparse points over SMB1 (Paulo Alcantara) [RHEL-109507]
  - cifs: Do not query WSL EAs for native SMB symlink (Paulo Alcantara) [RHEL-109507]
  - cifs: Optimize CIFSFindFirst() response when not searching (Paulo Alcantara) [RHEL-109507]
  - cifs: Fix calling CIFSFindFirst() for root path without msearch (Paulo Alcantara) [RHEL-109507]
  - cifs: add new field to track the last access time of cfid (Paulo Alcantara) [RHEL-109507]
  - smb: change return type of cached_dir_lease_break() to bool (Paulo Alcantara) [RHEL-109507]
  - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109507]
  - smb: invalidate and close cached directory when creating child entries (Paulo Alcantara) [RHEL-109507]
  - smb: client: use ParentLeaseKey in cifs_do_create (Paulo Alcantara) [RHEL-109507]
  - smb: client: use ParentLeaseKey in open_cached_dir (Paulo Alcantara) [RHEL-109507]
  - smb: client: add ParentLeaseKey support (Paulo Alcantara) [RHEL-109507]
  - net: openvswitch: allow providing upcall pid for the 'execute' command (Aaron Conole) [RHEL-84596]
  - net: netlink: add nla_get_*_default() accessors (Aaron Conole) [RHEL-84596]
  - benet: fix BUG when creating VFs (Michal Schmidt) [RHEL-106952]
  - eth: bnxt: fix missing ring index trim on error path (Michal Schmidt) [RHEL-107291] {CVE-2025-37873}
  - treewide: Switch/rename to timer_delete[_sync]() (bnxt) (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix memory leak in queue reset (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} (Michal Schmidt) [RHEL-107291] {CVE-2025-21973}
  - eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (Michal Schmidt) [RHEL-107291] {CVE-2025-21960}
  - eth: bnxt: fix out-of-range access of vnic_info array (Michal Schmidt) [RHEL-107291] {CVE-2025-22112}
  - eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in queue restart logic (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() (Michal Schmidt) [RHEL-107291] {CVE-2025-21974}
  - eth: bnxt: fix truesize for mb-xdp-pass case (Michal Schmidt) [RHEL-107291 RHEL-87499] {CVE-2025-21961}
  - net: ethtool: populate the default HDS params in the core (bnxt) (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix string truncation warning in FW version (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: always recalculate features after XDP clearing, fix null-deref (Michal Schmidt) [RHEL-107291] {CVE-2025-21682}
  - net: bnxt: use ethtool string helpers (Michal Schmidt) [RHEL-107291]
  - eth: Fix typo 'accelaration'. 'exprienced' and 'rewritting' (bnxt) (Michal Schmidt) [RHEL-107291]
  - smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-102433]
  - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-102433]
  - drm/amd/display: Fix AMDGPU_MAX_BL_LEVEL value (Robert Foss) [RHEL-75952]
  - drm/amd/display: Export full brightness range to userspace (Robert Foss) [RHEL-75952]
  - drm/amd/display: Optimize custom brightness curve (Robert Foss) [RHEL-75952]
  - drm/amd/display: Only read ACPI backlight caps once (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix default DC and AC levels (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add debugging message for brightness caps (Robert Foss) [RHEL-75952]
  - drm/amd/display: Get LTTPR IEEE OUI/Device ID From Closest LTTPR To Host (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add early 8b/10b channel equalization test pattern sequence (Robert Foss) [RHEL-75952]
  - drm/amdgpu/mes: add missing locking in helper functions (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix mpv playback corruption on weston (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add dc cap for dp tunneling (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (Robert Foss) [RHEL-75952]
  - drm/amdgpu: add kicker fws loading for gfx11/smu13/psp13 (Robert Foss) [RHEL-75952]
  - drm/amdgpu: switch job hw_fence to amdgpu_fence (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences (Robert Foss) [RHEL-75952]
  - drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL (Robert Foss) [RHEL-75952]
  - drm/xe: Fix early wedge on GuC load failure (Robert Foss) [RHEL-75952]
  - drm/xe: Fix taking invalid lock on wedge (Robert Foss) [RHEL-75952]
  - drm/xe: Fix memset on iomem (Robert Foss) [RHEL-75952]
  - drm/amd/display: Check dce_hwseq before dereferencing it (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add kicker device detection (Robert Foss) [RHEL-75952]
  - drm/amdgpu: VCN v5_0_1 to prevent FW checking RB during DPG pause (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix RMCM programming seq errors (Robert Foss) [RHEL-75952]
  - drm/xe/guc_submit: add back fix (Robert Foss) [RHEL-75952]
  - drm/xe/sched: stop re-submitting signalled jobs (Robert Foss) [RHEL-75952]
  - drm/xe/vm: move rebind_work init earlier (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct non-OLED pre_T11_delay. (Robert Foss) [RHEL-75952]
  - drm/amdgpu: disable workload profile switching when OD is enabled (Robert Foss) [RHEL-75952]
  - drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add null pointer check for get_first_active_display() (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Check return value when getting default PHY config (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix connecting to next bridge (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix phy de-init and flag it so (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Robert Foss) [RHEL-75952]
  - drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read (Robert Foss) [RHEL-75952]
  - drm/i915/ptl: Use everywhere the correct DDI port clock select mask (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Fix race in GWS queue scheduling (Robert Foss) [RHEL-75952]
  - drm/udl: Unregister device before cleaning up on disconnect (Robert Foss) [RHEL-75952]
  - drm/tegra: Fix a possible null pointer dereference (Robert Foss) [RHEL-75952]
  - drm/tegra: Assign plane type before registration (Robert Foss) [RHEL-75952]
  - drm/simpledrm: Do not upcast in release helpers (Robert Foss) [RHEL-75952]
  - drm/panel: simple: Tianma TM070JDHG34-00: add delays (Robert Foss) [RHEL-75952]
  - drm/cirrus-qemu: Fix pitch programming (Robert Foss) [RHEL-75952]
  - drm/ast: Fix comment on modeset lock (Robert Foss) [RHEL-75952]
  - drm/xe: Process deferred GGTT node removals on device unwind (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Explicitly exit CT safe mode on unwind (Robert Foss) [RHEL-75952]
  - drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type (Robert Foss) [RHEL-75952]
  - drm/bridge: ti-sn65dsi86: make use of debugfs_init callback (Robert Foss) [RHEL-75952]
  - drm/i915: fix build error some more (Robert Foss) [RHEL-75952]
  - drm/amd: Adjust output for discovery error handling (Robert Foss) [RHEL-75952]
  - drm: writeback: Fix drm_writeback_connector_cleanup signature (Robert Foss) [RHEL-75952]
  - drm/xe: move DPT l2 flush to a more sensible place (Robert Foss) [RHEL-75952]
  - drm/xe: Move DSB l2 flush to a more sensible place (Robert Foss) [RHEL-75952]
  - drm/i915/snps_hdmi_pll: Fix 64-bit divisor truncation by using div64_u64 (Robert Foss) [RHEL-75952]
  - drm/xe/display: Add check for alloc_ordered_workqueue() (Robert Foss) [RHEL-75952]
  - drm/amdgpu/mes: add compatibility checks for set_hw_resource_1 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add sanity checks for drm_edid_raw() (Robert Foss) [RHEL-75952]
  - drm/i915/display: Add check for alloc_ordered_workqueue() and alloc_workqueue() (Robert Foss) [RHEL-75952]
  - Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1" (Robert Foss) [RHEL-75952]
  - drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1 (Robert Foss) [RHEL-75952]
  - drm/scheduler: signal scheduled fence when kill job (Robert Foss) [RHEL-75952]
  - drm/amdgpu: seq64 memory unmap uses uninterruptible lock (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn2.5: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn3: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn4: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn5.0.1: read back register after written (Robert Foss) [RHEL-75952]
  - amd/amdkfd: fix a kfd_process ref leak (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: Fix VUpdate offset calculations for dcn401" (Robert Foss) [RHEL-75952]
  - drm/xe/bmg: Update Wa_16023588340 (Robert Foss) [RHEL-75952]
  - drm/amdkfd: move SDMA queue reset capability check to node_show (Robert Foss) [RHEL-75952]
  - drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled (Robert Foss) [RHEL-75952]
  - drm/nouveau/bl: increase buffer size to avoid truncate warning (Robert Foss) [RHEL-75952]
  - drm/ssd130x: fix ssd132x_clear_screen() columns (Robert Foss) [RHEL-75952]
  - drm/xe/svm: Fix regression disallowing 64K SVM migration (Robert Foss) [RHEL-75952]
  - drm/appletbdrm: Make appletbdrm depend on X86 (Robert Foss) [RHEL-75952]
  - udmabuf: use sgtable-based scatterlist wrappers (Robert Foss) [RHEL-75952]
  - drm/panel: simple: Add POWERTIP PH128800T004-ZZA01 panel entry (Robert Foss) [RHEL-75952]
  - drm/xe/uc: Remove static from loop variable (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add indirect L1_TLB_CNTL reg programming for VFs (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB (Robert Foss) [RHEL-75952]
  - drm/amd/display: Restructure DMI quirks (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct prefetch calculation (Robert Foss) [RHEL-75952]
  - drm/amd/pm: Reset SMU v13.0.x custom settings (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix VUpdate offset calculations for dcn401 (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx9: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amd/display: disable EASF narrow filter sharpening (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx8: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Disallow partition query during reset (Robert Foss) [RHEL-75952]
  - drm/amdgpu: fix MES GFX mask (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix Vertical Interrupt definitions for dcn32, dcn401 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct SSC enable detection for DCN351 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Update IPS sequential_ono requirement checks (Robert Foss) [RHEL-75952]
  - drm/xe/vf: Fix guc_info debugfs for VFs (Robert Foss) [RHEL-75952]
  - drm/xe: Use copy_from_user() instead of __copy_from_user() (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx7: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/ttm/tests: fix incorrect assert in ttm_bo_unreserve_bulk() (Robert Foss) [RHEL-75952]
  - drm/amd/display: fix zero value for APU watermark_c (Robert Foss) [RHEL-75952]
  - drm: panel-orientation-quirks: Add ZOTAC Gaming Zone (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx10: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amd/display: Do Not Consider DSC if Valid Config Not Found (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add basic validation for RAS header (Robert Foss) [RHEL-75952]
  - drm/amd/display: Skip to enable dsc if it has been off (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() (Robert Foss) [RHEL-75952]
  - drm/nouveau/gsp: fix rm shutdown wait condition (Robert Foss) [RHEL-75952]
  - drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (Robert Foss) [RHEL-75952]
  - drm/nouveau: fix hibernate on disabled GPU (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx11: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Drop workaround for GC v9.4.3 revID 0 (Robert Foss) [RHEL-75952]
  - drm/bridge: anx7625: change the gpiod_set_value API (Robert Foss) [RHEL-75952]
  - drm/panthor: Don't update MMU_INT_MASK in panthor_mmu_irq_handler() (Robert Foss) [RHEL-75952]
  - drm/bridge: anx7625: enable HPD interrupts (Robert Foss) [RHEL-75952]
  - drm/panel/sharp-ls043t1le01: Use _multi variants (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() (Robert Foss) [RHEL-75952]
  - drm/xe: Fix CFI violation when accessing sysfs files (Robert Foss) [RHEL-75952]
  - drm/amd/display: DCN32 null data check (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Fix API status offset for MES queue reset (Robert Foss) [RHEL-75952]
  - drm/dp: add option to disable zero sized address only transactions. (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx6: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/bridge: select DRM_KMS_HELPER for AUX_BRIDGE (Robert Foss) [RHEL-75952]
  - drm/amd/display: disable DPP RCG before DPP CLK enable (Robert Foss) [RHEL-75952]
  - accel/ivpu: Fix warning in ivpu_gem_bo_free() (Robert Foss) [RHEL-75952]
  - accel/ivpu: Use dma_resv_lock() instead of a custom mutex (Robert Foss) [RHEL-75952]
  - accel/ivpu: Trigger device recovery on engine reset/resume failure (Robert Foss) [RHEL-75952]
  - accel/ivpu: Use firmware names from upstream repo (Robert Foss) [RHEL-75952]
  - accel/ivpu: Improve buffer object logging (Robert Foss) [RHEL-75952]
  - drm/xe/lrc: Use a temporary buffer for WA BB (Robert Foss) [RHEL-75952]
  - drm/xe/pxp: Clarify PXP queue creation behavior if PXP is not ready (Robert Foss) [RHEL-75952]
  - drm/xe/pxp: Use the correct define in the set_property_funcs array (Robert Foss) [RHEL-75952]
  - drm/xe: Rework eviction rejection of bound external bos (Robert Foss) [RHEL-75952]
  - drm/xe/vsec: fix CONFIG_INTEL_VSEC dependency (Robert Foss) [RHEL-75952]
  - drm/xe/vm: move xe_svm_init() earlier (Robert Foss) [RHEL-75952]
  - drm/panel-simple: fix the warnings for the Evervision VGG644804 (Robert Foss) [RHEL-75952]
  - drm/i915/display: Fix u32 overflow in SNPS PHY HDMI PLL setup (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx10: Refine Cleaner Shader for GFX10.1.10 (Robert Foss) [RHEL-75952]
  - drm/i915/guc: Handle race condition where wakeref count drops below 0 (Robert Foss) [RHEL-75952]
  - drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP (Robert Foss) [RHEL-75952]
  - drm/i915/guc: Check if expecting reply before decrementing outstanding_submission_g2h (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Fix clk-disable removal (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Add support to get panel from the DP AUX bus (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Remove CONFIG_PM related check in analogix_dp_bind()/analogix_dp_unbind() (Robert Foss) [RHEL-75952]
  - accel/ivpu: Reorder Doorbell Unregister and Command Queue Destruction (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Remove the unnecessary calls to clk_disable_unprepare() during probing (Robert Foss) [RHEL-75952]
  - drm/connector: only call HDMI audio helper plugged cb if non-null (Robert Foss) [RHEL-75952]
  - drm/panic: Use a decimal fifo to avoid u64 by u64 divide (Robert Foss) [RHEL-75952]
  - drm/panic: clean Clippy warning (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Make creation of SLPC debugfs files conditional (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Don't expose GuC privileged debugfs files if VF (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Refactor GuC debugfs initialization (Robert Foss) [RHEL-75952]
  - drm/i915/dp_mst: Use the correct connector while computing the link BPP limit on MST (Robert Foss) [RHEL-75952]
  - drm/amd/display: Don't check for NULL divisor in fixpt code (Robert Foss) [RHEL-75952]
  - drm/tegra: rgb: Fix the unbound reference count (Robert Foss) [RHEL-75952]
  - drm/vkms: Adjust vkms_state->active_planes allocation type (Robert Foss) [RHEL-75952]
  - drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (Robert Foss) [RHEL-75952]
  - drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe() (Robert Foss) [RHEL-75952]
  - drm/panel: samsung-sofef00: Drop s6e3fc2x01 support (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Refine Cleaner Shader MEC firmware version for GFX10.1.x GPUs (Robert Foss) [RHEL-75952]
  - drm/panthor: Fix the panthor_gpu_coherency_init() error path (Robert Foss) [RHEL-75952]
  - drm/panthor: Update panthor_mmu::irq::mask when needed (Robert Foss) [RHEL-75952]
  - drm/panthor: Call panthor_gpu_coherency_init() after PM resume() (Robert Foss) [RHEL-75952]
  - drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions (Robert Foss) [RHEL-75952]
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Robert Foss) [RHEL-75952]
  - drm/xe/d3cold: Set power state to D3Cold during s2idle/s3 (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Fix dumb buffer leak (Robert Foss) [RHEL-75952]
  - drm/ci: fix merge request rules (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Add seqno waiter for sync_files (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: more liberal vmin/vmax update for freesync" (Robert Foss) [RHEL-75952]
  - drm/amdkfd: add hqd_sdma_get_doorbell callbacks for gfx7/8 (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: pause the workload setting in dm" (Robert Foss) [RHEL-75952]
  - audit,module: restore audit logging in load failure case (Richard Guy Briggs) [RHEL-52839]
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Li Tian) [RHEL-89165]
  - Enable the gs_usb CAN bus driver (Radu Rendec) [RHEL-83402]
  - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-103348]
  - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-103348]


author: Jarod Wilson <jarod@redhat.com> [5.14.0-608.el9]
changelog:
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (CKI Backport Bot) [RHEL-108385]
  - enic: fix incorrect MTU comparison in enic_change_mtu() (CKI Backport Bot) [RHEL-108264]
  - net/enic: Allow at least 8 RQs to always be used (CKI Backport Bot) [RHEL-108264]
  - tpm: tis: Double the timeout B to 4s (Štěpán Horáček) [RHEL-72765]
  - char: tpm: tpm-buf: Add sanity check fallback in read helpers (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Štěpán Horáček) [RHEL-72765]
  - tpm: do not start chip while suspended (Štěpán Horáček) [RHEL-72765]
  - tpm: ibmvtpm: Set TPM_OPS_AUTO_STARTUP flag on driver (Štěpán Horáček) [RHEL-72765]
  - tpm_tis: Explicitly check for error code (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: correct tpm_tis_flags enumeration values (Štěpán Horáček) [RHEL-72765]
  - tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality when interrupts are reenabled on resume (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality in interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Request threaded interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm: Implement usage counter for locality (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: do not check for the active locality in interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Move interrupt mask checks into own function (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Only handle supported interrupts (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality before writing interrupt registers (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Do not skip reset of original interrupt vector (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Avoid cache incoherency in test for interrupts (Štěpán Horáček) [RHEL-72765]
  - redhat/configs: sync CONFIG_SND_HDA_ACPI with ARK (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: acpi: Make driver's match data const static (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: acpi: Use SYSTEM_SLEEP_PM_OPS() (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: Add missing NVIDIA HDA codec IDs (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda - Add new driver for HDA controllers listed via (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda/tegra: Add Tegra264 support (Marcin Juszkiewicz) [RHEL-102695]
  - net: clear the dst when changing skb protocol (Felix Maurer) [RHEL-84579]
  - bpf: Revert "bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-uprobe attach logic" (Felix Maurer) [RHEL-84579]
  - bpf, sockmap: Avoid using sk_socket after free when sending (Felix Maurer) [RHEL-84579]
  - xsk: fix an integer overflow in xp_create_and_assign_umem() (Felix Maurer) [RHEL-84579 RHEL-87910] {CVE-2025-21997}
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-101009 RHEL-84579] {CVE-2025-21867}
  - bpf: sockmap, fix proto update hook to avoid dup calls (Felix Maurer) [RHEL-84579]
  - bpf: syzkaller found null ptr deref in unix_bpf proto add (Felix Maurer) [RHEL-84579]
  - xsk: Fix xsk_diag use-after-free error during socket cleanup (Felix Maurer) [RHEL-84579]
  - net: atlantic: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-105362]
  - net: aquantia: Use HWMON_CHANNEL_INFO macro to simplify code (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: Avoid -Wflex-array-member-not-at-end warnings (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: fix warning during hot unplug (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: support reading SFP module info (Izabela Bakollari) [RHEL-105362]
  - ethtool: Block setting of symmetric RSS when non-symmetric rx-flow-hash is requested (CKI Backport Bot) [RHEL-107024]


author: Jarod Wilson <jarod@redhat.com> [5.14.0-609.el9]
changelog:
  - udmabuf: Restore ubuf->unpin_list initialization (José Expósito) [RHEL-109567]
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-79910]
  - ima: annotate iint mutex to avoid lockdep false positive warnings JIRA: https://issues.redhat.com/browse/RHEL-59837 (Aaron Brookner)
  - i2c: mlxbf: avoid 64-bit division (Steve Dunnagan) [RHEL-103885]
  - i2c-mlxbf: Improve I2C bus timing configuration (Steve Dunnagan) [RHEL-103885]
  - i2c-mlxbf: Add repeated start condition support (Steve Dunnagan) [RHEL-103885]
  - i2c: mlxbf: Use str_read_write() helper (Steve Dunnagan) [RHEL-103885]
  - i2c: mlxbf: Use readl_poll_timeout_atomic() for polling (Steve Dunnagan) [RHEL-103885]
  - scsi: ufs: core: Fix use-after free in init error and remove paths (Jared Kangas) [RHEL-84800] {CVE-2025-21739}
  - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove() (Jared Kangas) [RHEL-84800]
  - scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove() (Jared Kangas) [RHEL-84800]
  - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers (Jared Kangas) [RHEL-84800]
  - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (Jared Kangas) [RHEL-84800]
  - scsi: ufs: Convert all platform drivers to return void (Jared Kangas) [RHEL-84800]
  - seqcount: replace smp_rmb() in read_seqcount() with load acquire (Čestmír Kalina) [RHEL-79880]
  - locking/ww_mutex/test: add MODULE_DESCRIPTION() (Čestmír Kalina) [RHEL-79880]
  - lockdep: suggest the fix for "lockdep bfs error:-1" on print_bfs_bug (Čestmír Kalina) [RHEL-79880]
  - lockdep: Use str_plural() to fix Coccinelle warning (Čestmír Kalina) [RHEL-79880]
  - lockdep: fix deadlock issue between lockdep and rcu (Čestmír Kalina) [RHEL-79880]
  - lockdep: Mark emergency sections in lockdep splats (Čestmír Kalina) [RHEL-79880]
  - locking/rwsem: Move is_rwsem_reader_owned() and rwsem_owner() under  CONFIG_DEBUG_RWSEMS (Čestmír Kalina) [RHEL-79880]
  - selftests: net/forwarding: test purge of active DWRR classes (Ivan Vecera) [RHEL-107487]
  - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107487]
  - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107487] {CVE-2025-38107}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-610.el9]
changelog:
  - HID: Intel-thc-hid: Intel-quicki2c: Enhance QuickI2C reset flow (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: pass correct arguments to acpi_evaluate_object (Benjamin Tissoires) [RHEL-65754]
  - HID: Intel-thc-hid: Intel-quickspi: Correct device state names gramatically (Benjamin Tissoires) [RHEL-65754]
  - HID: Intel-thc-hid: Intel-quickspi: Correct device state after S4 (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Fix spelling mistake "intput" -> "input" (Benjamin Tissoires) [RHEL-65754]
  - Hid: Intel-thc-hid: Intel-thc: Fix "dubious: !x | !y" issue (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Remove deprecated PCI API calls (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc: fix CONFIG_HID dependency (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: fix build errors in um mode (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: fix potential memory corruption (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Fix error code in thc_i2c_subip_init() (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add PM implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Complete THC QuickI2C driver (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add HIDI2C protocol implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C ACPI interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C driver hid layer (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add PM implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Complete THC QuickSPI driver (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add HIDSPI protocol implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI ACPI interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI driver hid layer (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC I2C config interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC SPI config interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC interrupt handler (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC LTR interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC DMA interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add APIs for interrupt (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC PIO operation APIs (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC registers definition (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Add basic THC driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: THC: Add documentation (Benjamin Tissoires) [RHEL-65754]
  - kernel.spec: add '-e' option to %preun for kernel-core and kernel-uki-virt (Xuemin Li) [RHEL-107668]
  - loop: use kiocb helpers to fix lockdep warning (Ming Lei) [RHEL-104374]
  - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106648] {CVE-2025-38464}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-611.el9]
changelog:
  - HID: wacom: fix crash in wacom_aes_battery_handler() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix kobject reference count leak (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on sysfs attribute creation failure (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on kobject creation failure (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix shift OOB in kfifo allocation for zero pktlen (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on size mismatch in wacom_wac_queue_flush() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: handle kzalloc() allocation failure in wacom_wac_queue_flush() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Remove static WACOM_PKGLEN_MAX limit (Benjamin Tissoires) [RHEL-102058]
  - HID: Wacom: Add PCI Wacom device support (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Status luminance properties should set brightness of all LEDs (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Improve behavior of non-standard LED brightness values (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix when get product name maybe null pointer (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Set eraser status when either 'Eraser' or 'Invert' usage is set (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Support devices with two touchrings (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Add preliminary support for high-resolution wheel scrolling (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Support touchrings with relative motion (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Improve warning for tablets falling back to default resolution (Benjamin Tissoires) [RHEL-102058]
  - sched: Change nr_uninterruptible type to unsigned long (Phil Auld) [RHEL-107437]
  - sched/core: Fix migrate_swap() vs. hotplug (Phil Auld) [RHEL-107437]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-612.el9]
changelog:
  - redhat: bump RHEL_MINOR to 8 (Patrick Talbert)
  - x86/cpu: Add new Intel CPU model numbers for Wildcatlake and Novalake (David Arcari) [RHEL-95631]
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (David Arcari) [RHEL-95631]
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105605]
  - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105598]
  - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105598]
  - net/smc: Fix lookup of netdev by using ib_device_get_netdev() (Mete Durlu) [RHEL-102713]
  - ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-104667]
  - net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-104667]
  - ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-104119]
  - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-104119]
  - ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-104119]
  - memory: tegra: Fix indentation (Marcin Juszkiewicz) [RHEL-26426]
  - memory: tegra: Add BPMP and ICC info for DLA clients (Marcin Juszkiewicz) [RHEL-26426]
  - memory: tegra: Correct DLA client names (Marcin Juszkiewicz) [RHEL-26426]
  - soc/tegra: pmc: Add SD wake event for Tegra234 (Marcin Juszkiewicz) [RHEL-26405]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-613.el9]
changelog:
  - x86/cpu: Remove useless work in detect_tme_early() (Frank Liang) [RHEL-111095]
  - x86/cpu: Clear TME feature flag if TME is not enabled by BIOS (Frank Liang) [RHEL-111095]
  - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110206]
  - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110235]
  - Makefile: add $(srctree) to dependency of compile_commands.json target (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: scripts/gdb: bring the "abspath" back (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: Use $(obj)/%.cc to fix host C++ module builds (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: scripts/gdb: Replace missed $(srctree)/$(src) w/ $(src) (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: use $(src) instead of $(srctree)/$(src) for source directory (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: use $(obj)/ instead of $(src)/ for common pattern rules (Herton R. Krzesinski) [RHEL-107194]
  - kbuild: do not add $(srctree) or $(objtree) to header search paths (Herton R. Krzesinski) [RHEL-107194]
  - arch: use $(obj)/ instead of $(src)/ for preprocessed linker scripts (Herton R. Krzesinski) [RHEL-107194]
  - arm64: vdso32: Remove unused vdso32-offsets.h (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: interface: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: vchiq-mmal: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: bcm2835-camera: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - staging: vc04_services: bcm2835-audio: Drop include Makefile directive (Herton R. Krzesinski) [RHEL-107194]
  - certs: check-in the default x509 config file (Herton R. Krzesinski) [RHEL-107194]
  - sparc: move the install rule to arch/sparc/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - riscv: move the (z)install rules to arch/riscv/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: move the install rule to arch/powerpc/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: make the install target not depend on any build artifact (Herton R. Krzesinski) [RHEL-107194]
  - powerpc: remove unused zInstall target from arch/powerpc/boot/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - nios2: move the install rule to arch/nios2/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - ARM: 9102/1: move theinstall rules to arch/arm/Makefile (Herton R. Krzesinski) [RHEL-107194]
  - dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-105063]
  - dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-105063]
  - redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-105063]
  - redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-105063]
  - dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-105063]
  - dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-105063]
  - spi: Introduce spi_get_device_match_data() helper (Ivan Vecera) [RHEL-105063]
  - dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-105063]
  - dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-105063]
  - tpm_crb_ffa: Remove unused export (Marcin Juszkiewicz) [RHEL-102691]
  - redhat/configs: enable CONFIG_TCG_ARM_CRB_FFA on aarch64 (Marcin Juszkiewicz) [RHEL-102691]
  - tpm: Do not remap from ACPI resources again for Pluton TPM (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: ffa_tpm: Implement driver compliant to CRB over FF-A (Marcin Juszkiewicz) [RHEL-102691]
  - ACPICA: Add start method for ARM FF-A (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Add support for the ARM FF-A start method (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Clean-up and refactor check for idle support (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Fix an error handling path in crb_acpi_add() (Marcin Juszkiewicz) [RHEL-102691]
  - tpm_crb: Add support for CRB devices based on Pluton (Marcin Juszkiewicz) [RHEL-102691]
  - Documentation: tpm: Add documentation for the CRB FF-A interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the missing entry in struct ffa_indirect_msg_hdr (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move memory allocation outside the mutex locking (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix memory leak by freeing notifier callback node (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Set dma_mask for ffa devices (Marcin Juszkiewicz) [RHEL-102691] {CVE-2025-38043}
  - firmware: arm_ffa: Skip the first/partition ID when parsing vCPU list (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Explicitly cast return value from NOTIFICATION_INFO_GET (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Explicitly cast return value from FFA_VERSION before comparison (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle ffa_notification_get correctly at virtual FF-A instance (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Allow multiple UUIDs per partition to register SRI callback (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for handling framework notifications (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for {un,}registration of framework notifications (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Stash ffa_device instead of notify_type in notifier_cb_info (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactoring to prepare for framework notification support (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Remove unnecessary declaration of ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Reject higher major version as incompatible (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Upgrade FF-A version to v1.2 in the driver (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for passing UUID in FFA_MSG_SEND2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Unregister the FF-A devices when cleaning up the partitions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle the presence of host partition in the partition info (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactor addition of partition information into XArray (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix big-endian support in __ffa_partition_info_regs_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix big-endian support in __ffa_partition_info_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Align sync_send_receive{,2} function prototypes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace UUID buffer to standard UUID format (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Replace SCMI by FF-A in the macro (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the race around setting ffa_dev->properties (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid string-fortify warning caused by memcpy() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid string-fortify warning in export_uuid() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fetch the Rx/Tx buffer size using ffa_features() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_YIELD in direct messaging (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_MSG_SEND_DIRECT_{REQ,RESP}2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_PARTITION_INFO_GET_REGS (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move the function ffa_features() earlier (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update the FF-A command list with v1.2 additions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Some coding style fixes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Split bus and driver into distinct modules (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Move the FF-A v1.0 NULL UUID workaround to bus notifier (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Avoid queuing work when running on the worker queue (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix memory corruption in ffa_msg_send2() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for FFA_MSG_SEND2 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Stash the partition properties for query purposes (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix kernel warning about incorrect SRI/NPI (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add support for handling notification pending interrupt(NPI) (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Refactor SRI handling in prepartion to add NPI support (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Skip creation of the notification bitmaps (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the partition ID check in ffa_notification_info_get() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Handle partitions setup failures (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Use xa_insert() and check for result (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Simplify ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Check xa_load() return value (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add missing rwlock_init() for the driver partition (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add missing rwlock_init() in ffa_setup_partitions() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix ffa_notification_info_get() IDs handling (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix the size of the allocation in ffa_partitions_cleanup() (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Fix FFA notifications cleanup path (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add checks for the notification enabled state (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Setup the partitions after the notification initialisation (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Allow FF-A initialisation even when notification fails (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Upgrade the driver version to v1.1 (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update memory descriptor to support v1.1 format (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Switch to using ffa_mem_desc_offset() accessor (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Simplify the computation of transmit and fragment length (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add notification handling mechanism (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add interface to send a notification to a given partition (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add interfaces to request notification callbacks (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Add schedule receiver callback mechanism (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Initial support for scheduler receiver interrupt (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the NOTIFICATION_INFO_GET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_NOTIFICATION_GET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_NOTIFICATION_SET interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the FFA_RUN interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement the notification bind and unbind interface (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Implement notification bitmap create and destroy interfaces (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Update the FF-A command list with v1.1 additions (Marcin Juszkiewicz) [RHEL-102691]
  - firmware: arm_ffa: Emit modalias for FF-A devices (Marcin Juszkiewicz) [RHEL-102691]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-614.el9]
changelog:
  - ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-111532]
  - EDAC/bluefield: Don't use bluefield_edac_readl() result on error (Jennifer Berringer) [RHEL-103881]
  - EDAC/bluefield: Use Arm SMC for EMI access on BlueField-2 (Jennifer Berringer) [RHEL-103881]
  - powerpc/pseries: Correct secvar format representation for static key management (Mamatha Inamdar) [RHEL-101853]
  - powerpc/secvar: Expose secvars relevant to the key management mode (Mamatha Inamdar) [RHEL-101853]
  - integrity/platform_certs: Allow loading of keys in the static key management mode (Mamatha Inamdar) [RHEL-101853]
  - s390/hypfs: Enable limited access during lockdown (Mete Durlu) [RHEL-111204]
  - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (Mete Durlu) [RHEL-111204]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN6 (David Arcari) [RHEL-106912]
  - x86/cpufeatures: Free up unused feature bits (David Arcari) [RHEL-106912]
  - x86/CPU/AMD: Ignore invalid reset reason value (David Arcari) [RHEL-103591]
  - PCI/ASPM: Fix link state exit during switch upstream function removal (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Fix L1SS saving (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Save parent L1SS config in pci_save_aspm_l1ss_state() (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Add notes about enabling PCI-PM L1SS to pci_enable_link_state(_locked) (Marcin Juszkiewicz) [RHEL-102694]
  - PCI/ASPM: Disable L1 before disabling L1 PM Substates (Marcin Juszkiewicz) [RHEL-102694]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Avoid shadowing ret in amd_pstate_ut_check_driver() (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Disable preferred cores on designs with workload classification (David Arcari) [RHEL-105422]
  - amd-pstate-ut: Reset amd-pstate driver mode after running selftests (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Modify cppc_get_auto_sel_caps() to cppc_get_auto_sel() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Adjust return code for inline functions in !CONFIG_ACPI_CPPC_LIB (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Refactor register value get and set ABIs (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Add cppc_set_reg_val() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Extract cppc_get_reg_val_in_pcc() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Rename cppc_get_perf() to cppc_get_reg_val() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Optimize cppc_get_perf() (David Arcari) [RHEL-105422]
  - ACPI: CPPC: Add IS_OPTIONAL_CPC_REG macro to judge if a cpc_reg is optional (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Add support for the "Requested CPU Min frequency" BIOS option (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Add offline, online and suspend callbacks for amd_pstate_driver (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Move max_perf limiting in amd_pstate_update (David Arcari) [RHEL-105422]
  - cpufreq/amd-pstate: Use scope based cleanup for cpufreq_policy refs [partial] (David Arcari) [RHEL-105422]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-615.el9]
changelog:
  - ACPI: processor: Rescan "dead" SMT siblings during initialization (David Arcari) [RHEL-113139]
  - intel_idle: Allow loading ACPI tables for any family (David Arcari) [RHEL-113139]
  - intel_idle: Update arguments of mwait_idle_with_hints() (David Arcari) [RHEL-113139]
  - intel_idle: Rescan "dead" SMT siblings during initialization (David Arcari) [RHEL-113139]
  - x86/smp: PM/hibernate: Split arch_resume_nosmt() (David Arcari) [RHEL-113139]
  - intel_idle: Use subsys_initcall_sync() for initialization (David Arcari) [RHEL-113139]
  - intel_idle: Add C1 demotion on/off sysfs knob (David Arcari) [RHEL-113139]
  - tools/power turbostat: version 2025.09.09 (David Arcari) [RHEL-110614]
  - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (David Arcari) [RHEL-110614]
  - tools/power turbostat: standardize PER_THREAD_PARAMS (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix DMR support (David Arcari) [RHEL-110614]
  - tools/power turbostat: add format "average" for external attributes (David Arcari) [RHEL-110614]
  - tools/power turbostat: delete GET_PKG() (David Arcari) [RHEL-110614]
  - tools/power turbostat: probe and display L3 cache topology (David Arcari) [RHEL-110614]
  - tools/power turbostat: Support more than 64 built-in-counters (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: Document Totl%C0, Any%C0, GFX%C0, CPUGFX% columns (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix bogus SysWatt for forked program (David Arcari) [RHEL-110614]
  - tools/power turbostat: Handle cap_get_proc() ENOSYS (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix build with musl (David Arcari) [RHEL-110614]
  - tools/power turbostat: verify arguments to params --show and --hide (David Arcari) [RHEL-110614]
  - tools/power turbostat: regression fix: --show C1E% (David Arcari) [RHEL-110614]
  - tools/power turbostat: version 2025.06.08 (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add initial support for BartlettLake (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add initial support for DMR (David Arcari) [RHEL-110614]
  - tools/power turbostat: Dump RAPL sysfs info (David Arcari) [RHEL-110614]
  - tools/power turbostat: Avoid probing the same perf counters (David Arcari) [RHEL-110614]
  - tools/power turbostat: Allow probing RAPL with platform_features->rapl_msrs cleared (David Arcari) [RHEL-110614]
  - tools/power turbostat: Clean up add perf/msr counter logic (David Arcari) [RHEL-110614]
  - tools/power turbostat: Introduce add_msr_counter() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_msr_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_cstate_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Remove add_rapl_perf_counter_() (David Arcari) [RHEL-110614]
  - tools/power turbostat: Quit early for unsupported RAPL counters (David Arcari) [RHEL-110614]
  - tools/power turbostat: Always check rapl_joules flag (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix AMD package-energy reporting (David Arcari) [RHEL-110614]
  - tools/power turbostat: Fix RAPL_GFX_ALL typo (David Arcari) [RHEL-110614]
  - tools/power turbostat: Add Android support for MSR device handling (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: pm_domain wording fix (David Arcari) [RHEL-110614]
  - tools/power turbostat.8: fix typo: idle_pct should be pct_idle (David Arcari) [RHEL-110614]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-616.el9]
changelog:
  - PM: EM: Add function for registering a PD without capacity update (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Support Clearwater Forest OOB mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: EAS: Increase cost for CPUs using L3 cache (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: EAS support for hybrid platforms (David Arcari) [RHEL-112493]
  - arch_topology: Relocate cpu_scale to topology.[h|c] (David Arcari) [RHEL-112493]
  - arch_topology: Make register_cpu_capacity_sysctl() tolerant to late CPUs (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_adjust_cpu_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Move CPU capacity check to em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Fix potential division-by-zero error in em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Address RCU-related sparse warnings (David Arcari) [RHEL-112493]
  - PM: EM: Consify two parameters of em_dev_register_perf_domain() (David Arcari) [RHEL-112493]
  - PM: EM: use kfree_rcu() to simplify the code (David Arcari) [RHEL-112493]
  - PM: EM: Slightly reduce em_check_capacity_update() overhead (David Arcari) [RHEL-112493]
  - PM: EM: Drop unused parameter from em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: Move sched domains rebuild function from schedutil to EM (David Arcari) [RHEL-112493]
  - PM: EM: Add min/max available performance state limits (David Arcari) [RHEL-112493]
  - PM: EM: Refactor em_adjust_new_capacity() (David Arcari) [RHEL-112493]
  - PM: EM: fix wrong utilization estimation in em_cpu_energy() (David Arcari) [RHEL-112493]
  - PM: EM: Force device drivers to provide power in uW (David Arcari) [RHEL-112493]
  - PM: EM: Fix nr_states warnings in static checks (David Arcari) [RHEL-112493]
  - PM: EM: Add em_dev_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Remove old table (David Arcari) [RHEL-112493]
  - PM: EM: Change debugfs configuration to use runtime EM table data (David Arcari) [RHEL-112493]
  - PM: EM: Optimize em_cpu_energy() and remove division (David Arcari) [RHEL-112493]
  - PM: EM: Support late CPUs booting and capacity adjustment (David Arcari) [RHEL-112493]
  - PM: EM: Add performance field to struct em_perf_state and optimize (David Arcari) [RHEL-112493]
  - PM: EM: Add em_perf_state_from_pd() to get performance states table (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_dev_update_perf_domain() for EM updates (David Arcari) [RHEL-112493]
  - PM: EM: Add functions for memory allocations for new EM tables (David Arcari) [RHEL-112493]
  - PM: EM: Use runtime modified EM for CPUs energy estimation in EAS (David Arcari) [RHEL-112493]
  - PM: EM: Introduce runtime modifiable table (David Arcari) [RHEL-112493]
  - PM: EM: Split the allocation and initialization of the EM table (David Arcari) [RHEL-112493]
  - PM: EM: Check if the get_cost() callback is present in em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Introduce em_compute_costs() (David Arcari) [RHEL-112493]
  - PM: EM: Refactor em_pd_get_efficient_state() to be more flexible (David Arcari) [RHEL-112493]
  - PM: EM: Find first CPU active while updating OPP efficiency (David Arcari) [RHEL-112493]
  - PM: EM: Extend em_cpufreq_update_efficiencies() argument list (David Arcari) [RHEL-112493]
  - PM: EM: Add missing newline for the message log (David Arcari) [RHEL-112493]
  - PM: EM: fix memory leak with using debugfs_lookup() (David Arcari) [RHEL-112493]
  - PM: EM: fix kernel-doc comments (David Arcari) [RHEL-112493]
  - cpufreq: intel_pstate: Populate the cpu_capacity sysfs entries (David Arcari) [RHEL-112493]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-617.el9]
changelog:
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113331] {CVE-2025-38718}
  - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-109212]
  - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-109212]
  - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID (David Arcari) [RHEL-23894]
  - drm/virtio: implement virtio_gpu_shutdown (Gerd Hoffmann) [RHEL-109504]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-618.el9]
changelog:
  - x86/hyperv: Fix kdump on Azure CVMs (Vitaly Kuznetsov) [RHEL-70228]
  - hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: add support of multiple ports (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: add additional port counters (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-109583]
  - net: mana: fix spelling for mana_gd_deregiser_irq() (Maxim Levitsky) [RHEL-109583]
  - net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-109583]
  - net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-109583]
  - net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-109583]
  - net: mana: Allocate MSI-X vectors dynamically (Maxim Levitsky) [RHEL-109583]
  - net: mana: Allow irq_setup() to skip cpus for affinity (Maxim Levitsky) [RHEL-109583]
  - net: mana: explain irq_setup() algorithm (Maxim Levitsky) [RHEL-109583]
  - PCI: hv: Allow dynamic MSI-X vector allocation (Maxim Levitsky) [RHEL-109583]
  - PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Maxim Levitsky) [RHEL-109583]
  - net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-109583]
  - RDMA/mana_ib: Add device statistics support (Maxim Levitsky) [RHEL-109583]
  - net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-109583]
  - net: mana: Fix warnings for missing export.h header inclusion (Maxim Levitsky) [RHEL-109583]
  - net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-109583]
  - tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-101033]
  - watchdog/hpwdt: Support Suspend and Resume (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Remove unused variable (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Remove redundant test. (Joseph Szczypek) [RHEL-104148]
  - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (Joseph Szczypek) [RHEL-104148]
  - NFSv4/flexfiles: Fix layout merge mirror check. (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear NFS_CAP_OPEN_XOR and NFS_CAP_DELEGTIME if not supported (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix a race when updating an existing write (Benjamin Coddington) [RHEL-108616]
  - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: call xs_sock_process_cmsg for all cmsg (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Don't clear capabilities that won't be reset (Benjamin Coddington) [RHEL-108616]
  - sunrpc: fix handling of server side tls alerts (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix the setting of capabilities when automounting a new filesystem (Benjamin Coddington) [RHEL-108616]
  - sunrpc: fix client side handling of tls alerts (Benjamin Coddington) [RHEL-108616]
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Benjamin Coddington) [RHEL-108616]
  - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Benjamin Coddington) [RHEL-108616]
  - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (Benjamin Coddington) [RHEL-108616]
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Benjamin Coddington) [RHEL-108616]
  - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Benjamin Coddington) [RHEL-108616]
  - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Benjamin Coddington) [RHEL-108616]
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Benjamin Coddington) [RHEL-108616]
  - nfsd: use threads array as-is in netlink interface (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls (Benjamin Coddington) [RHEL-108616]
  - nfs: ignore SB_RDONLY when remounting nfs (Benjamin Coddington) [RHEL-108616]
  - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (Benjamin Coddington) [RHEL-108616]
  - NFSv4/pnfs: Reset the layout state after a layoutreturn (Benjamin Coddington) [RHEL-108616]
  - svcrdma: Reduce the number of rdma_rw contexts per-QP (Benjamin Coddington) [RHEL-108616]
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Benjamin Coddington) [RHEL-108616]
  - NFSD: unregister filesystem in case genl_register_family() fails (Benjamin Coddington) [RHEL-108616]
  - nfs: handle failure of nfs_get_lock_context in unlock path (Benjamin Coddington) [RHEL-108616]
  - nfs: add missing selections of CONFIG_CRC32 (Benjamin Coddington) [RHEL-108616]
  - nfs: Add missing release on error in nfs_lock_and_join_requests() (Benjamin Coddington) [RHEL-108616]
  - NFS: Shut down the nfs_client only after all the superblocks (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for delayed delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for expired delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Avoid unnecessary scans of filesystems for returning delegations (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations (Benjamin Coddington) [RHEL-108616]
  - NFSD: Fix callback decoder status codes (Benjamin Coddington) [RHEL-108616]
  - NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory (Benjamin Coddington) [RHEL-108616]
  - nfsd: move error choice for incorrect object types to version-specific code. (Benjamin Coddington) [RHEL-108616]
  - nfsd: be more systematic about selecting error codes for internal use. (Benjamin Coddington) [RHEL-108616]
  - nfsd: Move error code mapping to per-version proc code. (Benjamin Coddington) [RHEL-108616]
  - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() (Benjamin Coddington) [RHEL-108616]
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up (Benjamin Coddington) [RHEL-108616]
  - nfsd: fix management of listener transports (Benjamin Coddington) [RHEL-108616]
  - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (Benjamin Coddington) [RHEL-108616]
  - sunrpc: suppress warnings for unused procfs functions (Benjamin Coddington) [RHEL-108616]
  - NFSv4: Fix a deadlock when recovering state on a sillyrenamed file (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: Prevent looping due to rpc_signal_task() races (Benjamin Coddington) [RHEL-108616]
  - SUNRPC: convert RPC_TASK_* constants to enum (Benjamin Coddington) [RHEL-108616]
  - NFS: Adjust delegated timestamps for O_DIRECT reads and writes (Benjamin Coddington) [RHEL-108616]
  - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (Benjamin Coddington) [RHEL-108616]
  - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read_plus_data() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read_plus() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Insulate nfsd4_encode_read() from page boundaries in the encode buffer (Benjamin Coddington) [RHEL-108616]
  - NFSD: Fix CB_GETATTR status fix (Benjamin Coddington) [RHEL-108616]
  - NFSD: fix decoding in nfs4_xdr_dec_cb_getattr (Benjamin Coddington) [RHEL-108616]
  - nfsd: fix legacy client tracking initialization (Benjamin Coddington) [RHEL-108616]
  - nfs: clear SB_RDONLY before getting superblock (Benjamin Coddington) [RHEL-108616]
  - nfs: ignore SB_RDONLY when mounting nfs (Benjamin Coddington) [RHEL-108616]
  - platform/x86/amd/hsmp: Ensure success even if hwmon registration fails (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Enhance the print messages to prevent confusion (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use IS_ENABLED() instead of IS_REACHABLE() (David Arcari) [RHEL-102859]
  - x86/platform/amd: replace down_timeout() with down_interruptible() (David Arcari) [RHEL-102859]
  - x86/platform/amd: move final timeout check to after final sleep (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: fix building with CONFIG_HWMON=m (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: acpi: Add sysfs files to display HSMP telemetry (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Report power via hwmon sensors (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use a single DRIVER_VERSION for all hsmp modules (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers (David Arcari) [RHEL-102859]
  - x86/platform/amd: Move the <asm/amd_node.h> header to <asm/amd/node.h> (David Arcari) [RHEL-102859]
  - x86/platform/amd: Clean up the <asm/amd/hsmp.h> header guards a bit (David Arcari) [RHEL-102859]
  - x86/platform/amd: Move the <asm/amd_hsmp.h> header to <asm/amd/hsmp.h> (David Arcari) [RHEL-102859]
  - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE (David Arcari) [RHEL-102859]
  - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (David Arcari) [RHEL-102859]
  - x86/amd_node: Use defines for SMN register offsets (David Arcari) [RHEL-102859]
  - x86/amd_node: Remove dependency on AMD_NB (David Arcari) [RHEL-102859]
  - x86/amd_node: Update __amd_smn_rw() error paths (David Arcari) [RHEL-102859]
  - x86/amd_nb: Move SMN access code to a new amd_node driver (David Arcari) [RHEL-102859]
  - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify function 3 search (David Arcari) [RHEL-102859]
  - x86/amd_nb: Use topology info to get AMD node count (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify root device search (David Arcari) [RHEL-102859]
  - x86/amd_nb: Simplify function 4 search (David Arcari) [RHEL-102859]
  - x86: Start moving AMD node functionality out of AMD_NB (David Arcari) [RHEL-102859]
  - x86/amd_nb: Clean up early_is_amd_nb() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Restrict init function to AMD-based systems (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (David Arcari) [RHEL-102859]
  - x86/amd_nb: Enhance SMN access error checking (David Arcari) [RHEL-102859]
  - hwmon: (k10temp) Check return value of amd_smn_read() (David Arcari) [RHEL-102859]
  - EDAC/amd64: Remove unused register accesses (David Arcari) [RHEL-102859]
  - EDAC/amd64: Check return value of amd_smn_read() (David Arcari) [RHEL-102859]
  - x86/amd_nb: Check for invalid SMN reads (David Arcari) [RHEL-102859]
  - x86/amd_nb: Add new PCI IDs for AMD family 0x1a (David Arcari) [RHEL-102859]
  - platform/x86: amd: Use *-y instead of *-objs in Makefiles [partial] (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Add support for HSMP protocol version 7 messages (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Change the error type (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Add new error code and error logs (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use dev_groups in the driver structure (David Arcari) [RHEL-102859]
  - sysfs: Fix crash on empty group attributes array (David Arcari) [RHEL-102859]
  - sysfs: Introduce a mechanism to hide static attribute_groups (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Use name space while exporting module symbols (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers (David Arcari) [RHEL-102859]
  - redhat/configs: Enable CONFIG_AMD_HSMP_ACPI and CONFIG_AMD_HSMP_PLAT on RHEL (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move ACPI code to acpi.c (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move platform device specific code to plat.c (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Move structure and macros to header file (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create wrapper function init_acpi() (David Arcari) [RHEL-102859]
  - platform/x86/amd/hsmp: Create hsmp/ directory (David Arcari) [RHEL-102859]
  - Documentation/x86/amd/hsmp: Updating urls (David Arcari) [RHEL-102859]
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [RHEL-106430] {CVE-2025-38472}
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113557] {CVE-2025-39694}
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Hangbin Liu) [RHEL-111150] {CVE-2025-38550}
  - devlink: add reserved fields to devlink_*_ops (Petr Oros) [RHEL-111906]
  - ixgbe: prevent from unwanted interface name changes (CKI Backport Bot) [RHEL-109607]
  - devlink: let driver opt out of automatic phys_port_name generation (CKI Backport Bot) [RHEL-109607]
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109528] {CVE-2025-38500}
  - dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-111904]
  - ice: use fixed adapter index for E825C embedded devices (Michal Schmidt) [RHEL-104010]
  - net: openvswitch: remove misbehaving actions length check (Aaron Conole) [RHEL-83440]
  - irdma: free iwdev->rf after removing MSI-X (Kamal Heib) [RHEL-103278 RHEL-95816]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113332] {CVE-2025-38718}
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - cpufreq: Move endif to the end of Kconfig file (Mark Langsdorf) [RHEL-112816]
  - cpufreq: Move CPPC configs to common Kconfig and add RISC-V (Mark Langsdorf) [RHEL-112816]
  - HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: simplify snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - redhat: set defaults for RHEL 9.7 (Augusto Caringi)
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112783] {CVE-2025-38352}
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110312] {CVE-2025-38396}
  - idpf: convert control queue mutex to a spinlock (Michal Schmidt) [RHEL-106051] {CVE-2025-38392}
  - redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83897]
  - x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h> (Waiman Long) [RHEL-83897]
  - x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83897]
  - x86/idle: Standardize argument types for MONITOR{,X} and MWAIT{,X} instruction wrappers on 'u32' (Waiman Long) [RHEL-83897]
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and  prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83897]
  - x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83897]
  - x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83897] {CVE-2025-22047}
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83897]
  - x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array (Waiman Long) [RHEL-83897] {CVE-2024-56721}
  - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-83897]
  - x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83897]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-83897]
  - x86/bugs: Use code segment selector for VERW operand (Waiman Long) [RHEL-83897] {CVE-2024-50072}
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Improve the erratum 1386 workaround (Waiman Long) [RHEL-83897]
  - x86: Add a comment about the "magic" behind shadow sti before mwait (Waiman Long) [RHEL-83897]
  - x86/bugs: Revert "Reverse instruction order of CLEAR_CPU_BUFFERS" (Waiman Long) [RHEL-83897]
  - scsi: mpt3sas: Fix a fw_event memory leak (Tomas Henzl) [RHEL-108656]
  - Revert "drm/gem-dma: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/prime: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - drm/framebuffer: Acquire internal references on GEM handles (Robert Foss) [RHEL-106696]
  - drm/gem: Acquire references on GEM handles for framebuffers (CKI Backport Bot) [RHEL-106696] {CVE-2025-38449}
  - Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-110519]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-619.el9]
changelog:
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (David Arcari) [RHEL-110754]
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114337] {CVE-2025-39698}
  - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ (Viktor Malik) [RHEL-100278]
  - mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109448]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-620.el9]
changelog:
  - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107304] {CVE-2025-38498}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107304] {CVE-2025-38498}
  - selftests: netfilter: skip br_netfilter queue tests if kernel is tainted (Waiman Long) [RHEL-107520]
  - fhandle: do_handle_open() should get FD with user flags (Waiman Long) [RHEL-107520]
  - Documentation/sysctl: coredump: add %F for pidfd number (Waiman Long) [RHEL-107520]
  - pidfs: never refuse ppid == 0 in PIDFD_GET_INFO (Waiman Long) [RHEL-107520]
  - fs/fhandle.c: fix a race in call of has_locked_children() (Waiman Long) [RHEL-107520] {CVE-2025-38306}
  - coredump: hand a pidfd to the usermode coredump helper (Waiman Long) [RHEL-107520]
  - coredump: fix error handling for replace_fd() (Waiman Long) [RHEL-107520]
  - pidfs: move O_RDWR into pidfs_alloc_file() (Waiman Long) [RHEL-107520]
  - pidfs/selftests: ensure correct headers for ioctl handling (Waiman Long) [RHEL-107520]
  - selftests/pidfd: fix header inclusion (Waiman Long) [RHEL-107520]
  - pidfs: improve ioctl handling (Waiman Long) [RHEL-107520]
  - selftests: remove unneeded include (Waiman Long) [RHEL-107520]
  - pidfs: allow bind-mounts (Waiman Long) [RHEL-107520]
  - pidfs: lookup pid through rbtree (Waiman Long) [RHEL-107520]
  - pidfs: check for valid ioctl commands (Waiman Long) [RHEL-107520]
  - pidfs: implement file handle support (Waiman Long) [RHEL-107520]
  - exportfs: add permission method (Waiman Long) [RHEL-107520]
  - fhandle: pull CAP_DAC_READ_SEARCH check into may_decode_fh() (Waiman Long) [RHEL-107520]
  - exportfs: add open method (Waiman Long) [RHEL-107520]
  - fhandle: simplify error handling (Waiman Long) [RHEL-107520]
  - pseudofs: add support for export_ops (Waiman Long) [RHEL-107520]
  - pidfs: support FS_IOC_GETVERSION (Waiman Long) [RHEL-107520]
  - pidfs: remove 32bit inode number handling (Waiman Long) [RHEL-107520]
  - pidfs: rework inode number allocation (Waiman Long) [RHEL-107520]
  - fs: fix is_mnt_ns_file() (Waiman Long) [RHEL-107520]
  - pidfd: add ioctl to retrieve pid info (Waiman Long) [RHEL-107520]
  - pidfs: check for valid pid namespace (Waiman Long) [RHEL-107520]
  - rbtree: provide rb_find_rcu() / rb_find_add_rcu() (Waiman Long) [RHEL-107520]
  - file: add fput() cleanup helper (Waiman Long) [RHEL-107520]
  - libfs: fix get_stashed_dentry() (Waiman Long) [RHEL-107520] {CVE-2024-46801}
  - pidfs: add selftests for new namespace ioctls (Waiman Long) [RHEL-107520]
  - pidfs: handle kernels without namespaces cleanly (Waiman Long) [RHEL-107520]
  - pidfs: when time ns disabled add check for ioctl (Waiman Long) [RHEL-107520]
  - pidfs: allow retrieval of namespace file descriptors (Waiman Long) [RHEL-107520]
  - nsfs: add open_namespace() (Waiman Long) [RHEL-107520]
  - nsproxy: add helper to go from arbitrary namespace to ns_common (Waiman Long) [RHEL-107520]
  - nsproxy: add a cleanup helper for nsproxy (Waiman Long) [RHEL-107520]
  - file: add take_fd() cleanup helper (Waiman Long) [RHEL-107520]
  - path: add cleanup helper (Waiman Long) [RHEL-107520]
  - fhandle: relax open_by_handle_at() permission checks (Waiman Long) [RHEL-107520]
  - fs/pidfs: make 'lsof' happy with our inode changes (Waiman Long) [RHEL-107520]
  - selftests: pidfd: ksft_exit functions do not return (Waiman Long) [RHEL-107520]
  - fs: Annotate struct file_handle with __counted_by() and use struct_size() (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix wrong expectation (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix config for pidfd_setns_test (Waiman Long) [RHEL-107520]
  - pidfs: remove config option (Waiman Long) [RHEL-107520]
  - libfs: improve path_from_stashed() (Waiman Long) [RHEL-107520]
  - libfs: add stashed_dentry_prune() (Waiman Long) [RHEL-107520]
  - libfs: improve path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - pidfs: convert to path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - nsfs: convert to path_from_stashed() helper (Waiman Long) [RHEL-107520]
  - libfs: add path_from_stashed() (Waiman Long) [RHEL-107520]
  - pidfd: add pidfs (Waiman Long) [RHEL-107520]
  - pidfd: move struct pidfd_fops (Waiman Long) [RHEL-107520]
  - pidfd: allow to override signal scope in pidfd_send_signal() (Waiman Long) [RHEL-107520]
  - pidfd: change pidfd_send_signal() to respect PIDFD_THREAD (Waiman Long) [RHEL-107520]
  - signal: fill in si_code in prepare_kill_siginfo() (Waiman Long) [RHEL-107520]
  - selftests: add ESRCH tests for pidfd_getfd() (Waiman Long) [RHEL-107520]
  - pidfd: getfd should always report ESRCH if a task is exiting (Waiman Long) [RHEL-107520]
  - pidfd: clone: allow CLONE_THREAD | CLONE_PIDFD together (Waiman Long) [RHEL-107520]
  - pidfd: change do_notify_pidfd() to use __wake_up(poll_to_key(EPOLLIN)) (Waiman Long) [RHEL-107520]
  - pid: kill the obsolete PIDTYPE_PID code in transfer_pid() (Waiman Long) [RHEL-107520]
  - pidfd: kill the no longer needed do_notify_pidfd() in de_thread() (Waiman Long) [RHEL-107520]
  - pidfd_poll: report POLLHUP when pid_task() == NULL (Waiman Long) [RHEL-107520]
  - pidfd: implement PIDFD_THREAD flag for pidfd_open() (Waiman Long) [RHEL-107520]
  - pidfd: don't do_notify_pidfd() if !thread_group_empty() (Waiman Long) [RHEL-107520]
  - pidfd: cleanup the usage of __pidfd_prepare's flags (Waiman Long) [RHEL-107520]
  - fork: Using clone_flags for legacy clone check (Waiman Long) [RHEL-107520]
  - __kill_pgrp_info: simplify the calculation of return value (Waiman Long) [RHEL-107520]
  - selftests/pidfd: Fix ksft print formats (Waiman Long) [RHEL-107520]
  - fs: convert core infrastructure to new timestamp accessors (Waiman Long) [RHEL-107520]
  - fs: new accessor methods for atime and mtime (Waiman Long) [RHEL-107520]
  - nsproxy: Convert nsproxy.count to refcount_t (Waiman Long) [RHEL-107520]
  - kernfs: convert to ctime accessor functions (Waiman Long) [RHEL-107520]
  - selftest: pidfd: Omit long and repeating outputs (Waiman Long) [RHEL-107520]
  - convert setns(2) to fdget()/fdput() (Waiman Long) [RHEL-107520]
  - fs: consolidate duplicate dt_type helpers (Waiman Long) [RHEL-107520]
  - Update relatime comments to include equality (Waiman Long) [RHEL-107520]
  - fork: use pidfd_prepare() (Waiman Long) [RHEL-107520]
  - pid: add pidfd_prepare() (Waiman Long) [RHEL-107520]
  - fork: allow CLONE_NEWTIME in clone3 flags (Waiman Long) [RHEL-107520]
  - selftests: pidfd: Fix incorrect kernel headers search path (Waiman Long) [RHEL-107520]
  - core_pattern: add CPU specifier (Waiman Long) [RHEL-107520]
  - selftests/pidfd_test: Remove the erroneous ',' (Waiman Long) [RHEL-107520]
  - selftests: pidfd: Fix compling warnings (Waiman Long) [RHEL-107520]
  - ksefltests: pidfd: Fix wait_states: Test terminated by timeout (Waiman Long) [RHEL-107520]
  - fork: remove duplicate included header files (Waiman Long) [RHEL-107520]
  - signal: Drop signals received after a fatal signal has been processed (Waiman Long) [RHEL-107520]
  - signal: Guarantee that SIGNAL_GROUP_EXIT is set on process exit (Waiman Long) [RHEL-107520]
  - signal: Ensure SIGNAL_GROUP_EXIT gets set in do_group_exit (Waiman Long) [RHEL-107520]
  - dynamic_dname(): drop unused dentry argument (Waiman Long) [RHEL-107520]
  - fork: Explicitly set PF_KTHREAD (Waiman Long) [RHEL-107520]
  - selftests: fix an unused variable warning in pidfd selftest (Waiman Long) [RHEL-107520]
  - selftests: fixup build warnings in pidfd / clone3 tests (Waiman Long) [RHEL-107520]
  - pidfd: fix test failure due to stack overflow on some arches (Waiman Long) [RHEL-107520]
  - kernel/fork.c: unshare(): use swap() to make code cleaner (Waiman Long) [RHEL-107520]
  - kernel/fork.c: unexport get_{mm,task}_exe_file (Waiman Long) [RHEL-107520]
  - kernel/pid.c: implement additional checks upon pidfd_create() parameters (Waiman Long) [RHEL-107520]
  - arm64: debug: remove debug exception registration infrastructure (Luis Claudio R. Goncalves) [RHEL-65658]
  - trap: cleanup trap_init() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split bkpt32 exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split brk64 exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split hardware watchpoint exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split single stepping exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: refactor reinstall_suspended_bps() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: split hardware breakpoint exception entry (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: entry: Add entry and exit functions for debug exceptions (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: remove break/step handler registration infrastructure (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: call step handlers statically (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: call software breakpoint handlers statically (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: kretprobes: acquire the regs via a BRK exception (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: kprobes: Return DBG_HOOK_ERROR if kprobes can not handle a BRK (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: Return early when break handler is found on linked-list (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: refactor aarch32_break_handler() (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: debug: clean up single_step_handler logic (Luis Claudio R. Goncalves) [RHEL-65658]
  - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (Jeremy Linton) [RHEL-108306]
  - arm64: errata: Expand speculative SSBS workaround once more (Jeremy Linton) [RHEL-108306]
  - arm64: errata: Expand speculative SSBS workaround (again) (Jeremy Linton) [RHEL-108306]
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Neoverse-N3 definitions (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Cortex-A725 definitions (Jeremy Linton) [RHEL-108306]
  - arm64: cputype: Add Cortex-X1C definitions (Jeremy Linton) [RHEL-108306]
  - EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh (Joel Savitz) [RHEL-102251]


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: Tao Liu <ltao@redhat.com> - 2.0.29-8
changelog:
  - kdumpctl: check and generate /etc/vconsole.conf
  - kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-5
changelog:
  - resolves: RHEL-101761 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-4.el9)


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Evan Goode <egoode@redhat.com> - 0.69.0-16
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-95006)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.46-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: use the right distro for coverage reporting (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.47-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - feat: [1.29] Call random.seed() at begining of auto-register
    (jhnidek@redhat.com)
  - feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
  - fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Dan Horák <dhorak@redhat.com> - 4.2.3-1
changelog:
  - updated to 4.2.3 (RHEL-11415)
  - fix selfcheck in FIPS mode (RHEL-9918)
  - Resolves: RHEL-11415 RHEL-9918


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Patsy Griffin <patsy@redhat.com> - 6.04-4
changelog:
  - Activate previously added patch to improve mktime documentation and
    add 3 related upstream patches including an example.
    Related: RHEL-58342


author: Patsy Griffin <patsy@redhat.com> - 6.04-7
changelog:
  - Break up man-pages-additional-20140218.tar.xz
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.
    Resolves: RHEL-101596


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Dan Horák <dhorak@redhat.com> - 2.3.0-1
changelog:
  - updated to 2.3.0 (#2044177)
  - add provider for openssl 3.x (#2044185)
  - Resolves: #2044177 #2044185


author: Dan Horák <dhorak@redhat.com> - 2.4.0-2
changelog:
  - engine: Only register those algos specified with default_algorithms (#2221894)
  - Resolves: #2221894


author: Dan Horák <dhorak@redhat.com> - 2.4.0-4
changelog:
  - provider: RSA: Fix get_params to retrieve max-size, bits, and security-bits (#2222878 #2224568)
  - provider: Default debug directory to /tmp but make it configurable (#2160084)
  - Resolves: #2222878 #2160084 #2224568


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-24
changelog:
  - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519
  - pam.conf: remove tallylog. Resolves: RHEL-15324


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-26
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Miro Hrončok <mhroncok@redhat.com> - 21.0.1-2
changelog:
  - python-pip-wheel: Remove bundled provides and libcrypt recommends for Python 2
    (The wheel is Python 3 only for a while)


author: Tomas Orsava <torsava@redhat.com> - 21.0.1-5
changelog:
  - Provide the platform-python-pip name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.1-1
changelog:
  - Update to 51.1.1
  - Fixes test failures with pip 20.3 as well as with pytest 6.2+
  - Fixes: rhbz#1909575


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.2-1
changelog:
  - Update to 51.1.2
  - Removes tests from the wheel
  - https://setuptools.readthedocs.io/en/latest/history.html#v51-1-2
  - Fixes: rhbz#1914481


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Tomas Orsava <torsava@redhat.com> - 1.14.5-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-3
changelog:
  - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
  - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Christian Heimes <cheimes@redhat.com> - 2.1.0-3
changelog:
  - Add bconds for extras require trio, curio, and doh
  - Move trio and curio backend modules into extras subpackages
  - Enable python3-dns+curio meta package
  - Skip failing test testCanonicalNameDangling


author: Rafael Jeffman <rjeffman@redhat.com> - 2.2.1-1
changelog:
  - Rebase to version 2.2.1
    Resolves: rhbz#2088661
  - Disable DNSSEC tests using SHA1 due to crypto policies
    Resolves: rhbz#2107651


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: John Kacur <jkacur@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream python-linux-procfs-0.7.3
  - This rebase removes upstream spec files and
  - syncs the git tag with version
  Resolves: RHEL-7614


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.3.4-2
changelog:
  - Apply PR6 by Igor Raits <ignatenkobrain@fedoraproject.org>: Support
    for building on EPEL8 + upstream tests invocation.
  - Remove unused BR on python3-tidy (we'd need pytidylib instead, which
    doesn't seem to be packaged).


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.1-3
changelog:
  - Subpackage python2-pysocks has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-7
changelog:
  - Make the python-setuptools-wheel subpackage versioned (python3-setuptools-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.10-3
changelog:
  - Drop redundant BuildRequires for nose
  - Instead of the mock backport, use unittest.mock from the standard library


author: Karolina Surma <ksurma@redhat.com> - 1.26.5-1
changelog:
  - Update to 1.26.5
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1972639


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.5-6
changelog:
  - Security fix for CVE-2024-37891
  - Backport upstream patch to fix TypeError for http connection if the PoolManager
  - is instantiated with server_hostname
  Resolves: RHEL-43172
  Resolves: RHEL-39285


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - LDAP socket timeout, fix duplicated logs and new Samba command line options
    Resolves: rhbz#2038260
    Resolves: rhbz#2038268
    Resolves: rhbz#2028530


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: systemd maintenance team <systemd-maint@redhat.com> - 252-41
changelog:
  - timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020)
  - cryptsetup-tokens: fix pin asserts (RHEL-36276)
  - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276)
  - kernel-install: check machine ID (RHEL-50672)
  - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672)
  - hwdb: Add Lenovo G580 (RHEL-5950)
  - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950)
  - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950)
  - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950)
  - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950)
  - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950)
  - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950)
  - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950)
  - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950)
  - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950)
  - Update 60-evdev.hwdb (#25704) (RHEL-5950)
  - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950)
  - hwdb: drop trailing space (RHEL-5950)
  - hwdb: add comments about matching entries (RHEL-5950)
  - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950)
  - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950)
  - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950)
  - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950)
  - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950)
  - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950)
  - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950)
  - hwdb: remove spurious whitespace (RHEL-5950)
  - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950)
  - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: Add mount matrix for Linx 1020 (RHEL-5950)
  - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950)
  - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950)
  - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update autosuspend db (RHEL-5950)
  - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950)
  - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950)
  - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950)
  - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950)
  - hwdb: add override for IdeaPad5 insert key (RHEL-5950)
  - hwdb: update database (RHEL-5950)
  - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950)
  - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950)
  - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950)
  - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950)
  - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950)
  - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950)
  - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950)
  - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950)
  - hwdb: drop redundant entry (RHEL-5950)
  - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950)
  - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950)
  - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950)
  - hwdb: Add support for "Passion Model P612F" (RHEL-5950)
  - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950)
  - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950)
  - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950)
  - hwdb: Fix rotation for BMAX Y13 (RHEL-5950)
  - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950)
  - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950)
  - hwdb: do not include '#' in modalias (RHEL-5950)
  - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950)
  - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950)
  - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950)
  - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950)
  - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950)
  - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950)
  - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950)
  - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950)
  - hwdb: Add override for headset form-factors (RHEL-5950)
  - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950)
  - hwdb: drop trailing white space (RHEL-5950)
  - hwdb: merge multiple keyboard entries with same setting (RHEL-5950)
  - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950)
  - hwdb update for v246-rc1 (RHEL-5950)
  - update hwdb autosuspend data for v254 (RHEL-5950)
  - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950)
  - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950)
  - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950)
  - Add alternate name for MX Ergo as found on some devices (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950)
  - Update 60-sensor.hwdb (#28804) (RHEL-5950)
  - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950)
  - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950)
  - hwdb: keyboard: D330 FnLk toggle (RHEL-5950)
  - hwdb: Add Logitech G502 X (RHEL-5950)
  - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950)
  - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950)
  - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950)
  - hwdb: Bush tablet rotation support (#29268) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950)
  - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950)
  - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950)
  - add udev rule for micmute (f20) (RHEL-5950)
  - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update hwdb autosuspend rules (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950)
  - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: rename .html=>.csv (RHEL-5950)
  - hwdb/acpi-update.py: streamline python code (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: add Predator PHN16-71 (RHEL-5950)
  - Update 60-autosuspend.hwdb (#30131) (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950)
  - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950)
  - Add three Dell platforms to sensor accel location base (RHEL-5950)
  - Add Bosto BT-12HD series to hwdb (RHEL-5950)
  - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950)
  - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950)
  - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950)
  - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950)
  - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950)
  - hwdb: add resolution setting for GAOMON S620 (RHEL-5950)
  - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950)
  - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950)
  - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950)
  - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950)
  - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950)
  - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950)
  - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950)
  - Update USB ids of hwdb (RHEL-5950)
  - Added resolution for Huion Kamvas Pro 19 (RHEL-5950)
  - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950)
  - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950)
  - Fixed resolution for pen and touchpad (RHEL-5950)
  - hwdb: fix missing colon (#32108) (RHEL-5950)
  - hwdb: update for v256 (RHEL-5950)
  - autosuspend: update for v256 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950)
  - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950)
  - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950)
  - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950)
  - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950)
  - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950)
  - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950)
  - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950)
  - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950)
  - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950)
  - hwdb: add a vmbus id for HyperV Video device (RHEL-5950)
  - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950)
  - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950)
  - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950)
  - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950)
  - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950)
  - Add OrangePi NEO Scancodes (RHEL-5950)
  - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950)
  - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950)
  - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950)
  - hwdb: Add some HP IR cameras (RHEL-5950)
  - hwdb: add more AV controllers (RHEL-5950)
  - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950)
  - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950)
  - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950)
  - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950)
  - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950)
  - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950)
  - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - add udev rules for trezor hw wallet devices (RHEL-5950)
  - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950)
  - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950)
  - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-43
changelog:
  - udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103)
  - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103)
  - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103)
  - Include <threads.h> if possible to get thread_local definition (RHEL-50651)
  - add APIs for detecting confidential virtualization (RHEL-50651)
  - detect-virt: add --cvm option (RHEL-50651)
  - detect-virt: add --list-cvm option (RHEL-50651)
  - unit: add "cvm" option for ConditionSecurity (RHEL-50651)
  - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651)
  - core: log detected confidential virtualization type (RHEL-50651)
  - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651)
  - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-50651)
  - confidential-virt: add detection for s390x target (RHEL-50651)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-52
changelog:
  - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-15051)
  - unit: always return 1 in log_kill (RHEL-78170)
  - ci: enable mkosi workflow for z-stream branches (RHEL-79977)
  - ci(mkosi): bump fedora version from 39 to 41 (RHEL-79977)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-53
changelog:
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-86891)
  - backlight: Drop support for actual_brightness (RHEL-86714)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-54
changelog:
  - unit: add conditions and deps to make oomd.socket and .service consistent (RHEL-90417)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-25516)
  - Add a set of assertion macros to tests.h (ASSERT_OK(), ASSERT_EQ(), ASSERT_GE(), ASSERT_LE()) that log the failed condition before crashing and convert test-gpt.c test file to use them (RHEL-103753)
  - Follow up with the PR #31819 (RHEL-103753)
  - Added more ASSERT macro and also make some test file to use them (RHEL-103753)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-103753)
  - test: add test case for issue #38265 (RHEL-103753)
  - test: answer 2nd mdadm --create question for compat with new version (RHEL-79977)
  - sysusers: cross-check user and group names too (RHEL-72572)
  - test-sysusers: check group creation with matching user entry (RHEL-72572)
  - user-sessions: do not remove /etc/nologin (RHEL-85467)
  - hwdb: f20 → micmute (RHEL-72697)
  - hwdb: f21 → touchpad_toggle (RHEL-72697)
  - hwdb: f22 → touchpad_on (RHEL-72697)
  - hwdb: f23 → touchpad_off (RHEL-72697)
  - hwdb: drop some now redundant mappings (RHEL-72697)
  - hwdb: Add micmute for System76 (RHEL-72697)
  - hwdb: Add newer System76 Pangolins (RHEL-72697)
  - hwdb: WALTOP International Corp. Slim Tablet Stylus (RHEL-72697)
  - hwdb: add MSI Claw 8 AT Keyboard Scancodes (#36180) (RHEL-72697)
  - Adds asus T103HAF rotation matrix to 60-sensor.hwdb (#36177) (RHEL-72697)
  - hwdb: fix screen rotation for EXO Wings 2in1 w1125 (#36283) (RHEL-72697)
  - hwdb: XBox Series Elite controller modalias entry has been added. (#36305) (RHEL-72697)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72697)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72697)
  - hwdb.d: add support for Akoya P15645 (RHEL-72697)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72697)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72697)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72697)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72697)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72697)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72697)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72697)
  - hwdb: add G-Mode key support (#37175) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72697)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72697)
  - Add emulated release to G-Mode key (RHEL-72697)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72697)
  - hwdb: add bladeRF SDR devices (RHEL-72697)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72697)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72697)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72697)
  - hwdb: say that settings can be also set to 0 (RHEL-72697)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72697)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72697)
  - hwdb: run "update-hwdb" (RHEL-72697)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72697)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72697)
  - hwdb: add Ettus Research SDR devices (RHEL-72697)
  - hwdb: add RTL-SDR devices (RHEL-72697)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72697)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72697)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72697)
  - hwdb: add support for Loupedeck devices (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72697)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72697)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72697)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72697)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72697)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72697)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - Fix Positivo K116J search key and www shortcut (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72697)
  - hwdb: several cleanups (RHEL-72697)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - hwdb: update autosuspend rules (RHEL-72697)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72697)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72697)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72697)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72697)
  - flush_ports: flush POSIX message queues properly (RHEL-90860)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install (RHEL-83932)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install.in (RHEL-83932)
  - kernel-install: do not mix || and && (RHEL-83932)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-83932)
  - cgroup: add support for memory.peak (RHEL-95797)
  - core: include peak memory in unit_log_resources() (RHEL-95797)
  - run: include peak memory in output (RHEL-95797)
  - core: ensure init.scope is realized after drop-ins have been loaded (RHEL-103488)
  - core: add possibility to not track certain unit types (RHEL-89796)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-55
changelog:
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - build: add some coloring to --version output (RHEL-100353)
  - core: output log cycle path in one log message, not many (RHEL-100353)
  - core: make log cycle messages recognizable via message IDs (RHEL-100353)
  - core: change ordering cycle log message log levels (RHEL-100353)
  - core: cast log_oom() got void (RHEL-100353)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-100353)
  - catalog: add entries for the order cycle log messages (RHEL-100353)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - core/transaction: do not attempt to log "n/a" as a journal field (RHEL-100353)


author: Jiri Hnidek <jhnidek@redhat.com> 4-1
changelog:
  * Tue Jul 26 2022 Jiri Hnidek <jhnidek@redhat.com> 3-1
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - test: drop unused reference-image file (ptoscano@redhat.com)
  - Drop the static npm-shrinkwrap.json (ptoscano@redhat.com)
  - Bump cockpit test API to 273 + run-tests scheduler fix (martin@piware.de)
  - spec: suggest insights-client on RHEL (ptoscano@redhat.com)
  - tito: remove autogenerated spec file before tagging (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 5-1
changelog:
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2077759: invoke cockpit.translate() after document loading
    (ptoscano@redhat.com)
  - test: Drop outdated copy of packagelib.py (martin@piware.de)
  - Added missing keys to react components (jhnidek@redhat.com)
  - Fix the issue, when it is not possible to install insights-client
    (jhnidek@redhat.com)
  - test: Sync packagelib.py with cockpit main (martin@piware.de)
  - New target and added one project directory to .gitignore (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1
changelog:
  - Update the sources to 6.13
  - Add important fixes from the upstream
  - Remove Provides: jitterentropy-rngd as it was retired in f29.


author: Vladis Dronov <vdronov@redhat.com> - 6.13-3
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm
    is not run in a container (bz 1965318)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-4.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190 (bz 1965318)
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Adjust Source0 to a more proper one


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ 6dcc9ec2 (bz 2124605)
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ cb8cc624 (bz 2156554)
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 0e560296 (bz 2174916)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-7
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
  - Use proper SPDX license identifiers
  - Fix a test failure


author: Vladis Dronov <vdronov@redhat.com> - 6.17-1
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-64951)


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Steve Dickson <steved@redhat.com> - 1.2.6-1
changelog:
  - Use sysconfig variable in service file (bz 1972094)
  - Make sure policycoreutils is installed before using it (bz 1972133)
  - Make sure /var/lib/rpcbind exists (bz 1972133)
  - Corrected the URL reference (bz 1972117)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-21
changelog:
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
  - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
  - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
  - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-2
changelog:
  - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70208 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-1
changelog:
  - rebased to 2.27.0 (#2160062)
  - lszcrypt fails when querying a specific domain (#2177612)
  - DASD autoquiesce support (#2196517)
  - zcrypt DD: AP command filtering (#2170360)
  - vmconvert and zgetdump consolidation (#2173924)
  - Support for List-Directed dump from ECKD DASD (#2160052)
  - Support for List-Directed IPL and re-IPL from ECKD DASD (#2160040)
  - Resolves: #2160062 #2177612 #2196517 #2170360 #2173924 #2160052 #2160040


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-2
changelog:
  - zdev: cleanup patches to fix warnings (#2223304)
  - zdev: add missing label in the udev-rules (#2222900)
  - Resolves: #2223304 #2222900


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73342)
  - LPAR level power consumption reporting (RHEL-72675)
  - Provide Topology-Map information to userspace (RHEL-72682)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73021)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390)
  - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.53-1
changelog:
  - Allow svirt_t to connect to nbdkit over a unix stream socket
  Resolves: RHEL-56029
  - Allow power-profiles-daemon the bpf capability
  Resolves: RHEL-61117
  - Allow systemd-machined the kill user-namespace capability
  Resolves: RHEL-76352


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.54-1
changelog:
  - Confine tuned-ppd
  Resolves: RHEL-69526
  - Make tuned work with mls policy
  Resolves: RHEL-69526
  - Allow afterburn to mount and read config drives
  Resolves: RHEL-79319


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.55-1
changelog:
  - Allow tuned-ppd read sssd public files
  Resolves: RHEL-69526
  - Allow systemd-journal-upload read init pid files
  Resolves: RHEL-62196
  - Label SetroubleshootPrivileged.py with setroubleshootd_exec_t
  Resolves: RHEL-77319
  - Allow chronyd-restricted sendto to chronyc
  Resolves: RHEL-82308
  - Allow chronyc sendto to chronyd-restricted
  Resolves: RHEL-82308


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.56-1
changelog:
  - Remove 3 permissive domains
  Resolves: RHEL-82674
  - Allow tuned-ppd dbus chat with xdm
  Resolves: RHEL-87203
  - Allow system-dbusd list systemd-machined directories
  Resolves: RHEL-85379
  - Allow NetworkManager create and use icmp_socket
  Resolves: RHEL-83529
  - Allow journalctl connect to systemd-userdbd over a unix socket
  Resolves: RHEL-82673
  - allow gdm and iiosensorproxy talk to each other via D-bus
  Resolves: RHEL-80697
  - Allow varnishd execute the prlimit64() syscall
  Resolves: RHEL-77995
  - Allow system_dbusd_t r/w unix stream sockets of unconfined_service_t
  Resolves: RHEL-61928
  - Add the getattr permission to 2 dontaudit interfaces
  Resolves: RHEL-59145


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.57-1
changelog:
  - Update policy for haproxyd
  Resolves: RHEL-88045
  - Allow NetworkManager manage NetworkManager_etc_rw_t symlinks
  Resolves: RHEL-86178
  - Allow lldpad connect to systemd-userdbd over a unix socket
  Resolves: RHEL-84046
  - Allow gconfd connect to system dbus
  Resolves: RHEL-77984
  - Allow login_pgm read filesystem sysctls
  Resolves: RHEL-77745
  - Allow login_userdomain create /run/tlog directory with user_tmp_t
  Resolves: RHEL-47241


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.58-1
changelog:
  - Allow mptcpd the net_admin capability
  Resolves: RHEL-81729
  - Allow networkmanager send a general signal to iptables
  Resolves: RHEL-93741
  - Make bootupd use bootupd_tmp_t as its private type for files in /tmp
  Resolves: RHEL-94508
  - Update bootupd policy
  Resolves: RHEL-94508
  - Allow switcheroo-control dbus chat with xdm
  Resolves: RHEL-93335
  - Update the files_search_mnt() interface
  Resolves: RHEL-94184


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.59-1
changelog:
  - virt: allow QEMU use of the qgs daemon for attestation
  Resolves: RHEL-87744
  - qgs: add contrib module for TDX "qgs" daemon
  Resolves: RHEL-87744
  - kernel: add interfaces for using SGX enclaves
  Resolves: RHEL-87744
  - Allow coreos-installer search sssd library directory
  Resolves: RHEL-95689
  - Label /dev/diag as diagnostic_device_t
  Resolves: RHEL-95342
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-1556


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.60-1
changelog:
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-1556
  - Update irqbalance policy for using unconfined scripts
  Resolves: RHEL-1556


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.61-1
changelog:
  - Fix incorrect /run and /usr/bin file context entries
  Resolves: SELINUX-4392
  - Dontaudit irqbalance read sssd public files
  Resolves: RHEL-1556
  - Update sssd_dontaudit_read_public_files()
  Resolves: RHEL-1556
  - Allow insights-client file transition for files in /var/tmp
  Resolves: SELINUX-4392
  - Add the virt_exec_virsh() interface
  Resolves: SELINUX-4392
  - Add the ssh_exec_sshd() interface
  Resolves: SELINUX-4392
  - Add rhsmcertd interfaces
  Resolves: SELINUX-4392
  - Add the bind_exec_named_checkconf() interface
  Resolves: SELINUX-4392
  - Add the auth_write_motd_var_run_files() interface
  Resolves: SELINUX-4392
  - Add the gpg_domtrans_agent() interface
  Resolves: SELINUX-4392
  - Add the gpg_read_user_secrets() interface
  Resolves: SELINUX-4392
  - Add policy for insights-core
  Resolves: SELINUX-4392


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.62-1
changelog:
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-59683
  - Allow systemd-timedated start/stop timemaster services
  Resolves: RHEL-95690
  - Allow lldpd connect to systemd-machined over a unix socket
  Resolves: RHEL-96167
  - Allow power-profiles-daemon get attributes of filesystems with extended attributes
  Resolves: RHEL-100718
  - Allow tuned-ppd watch_reads sysfs directories
  Resolves: RHEL-101687
  - Allow tuned-ppd watch sysfs directories
  Resolves: RHEL-101687


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.63-1
changelog:
  - Allow samba-dcerpcd send sigkills to passwd
  Resolves: RHEL-100032
  - Allow power-profiles-daemon watch sysfs directories
  Resolves: RHEL-100718
  - Allow power-profiles-daemon write sysfs files
  Resolves: RHEL-100718
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-59683
  - Allow irqbalance search sssd lib directories
  Resolves: RHEL-1556
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-59145


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.64-1
changelog:
  - Add insights_core and insights_client interfaces
  Related: RHEL-59145
  - Label /usr/libexec/postfix/tlsproxy with postfix_smtp_exec_t
  Resolves: RHEL-77101
  - Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
  Resolves: RHEL-101140


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.65-1
changelog:
  - Revert "Add policy for insights-core"
  Resolves: RHEL-110650
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110650


author: Martin Osvald <mosvald@redhat.com> - 2.13.7-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2066753)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2066767)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#2026892)


author: Martin Osvald <mosvald@redhat.com> - 2.13.6-1
changelog:
  - csh.login: set PATH again (if empty) to prevent interpreter error (#1744106)
  - aliases: add pcp user (#1744091)
  - lang.csh: fix several variable substitution bugs and typos (#1746749)
  - don't set LANG as a per-shell variable
  - fix lang.csh script so it doesn't break tcsh -e scripts II (#1620004)
  - use full path for non-builtins in csh.cshrc, csh.login, lang.csh, lang.sh and profile (#1747493)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-13
changelog:
  - nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
  - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-3
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013015
  - useradd: generate home and mail directories with selinux user attribute. Resolves: #1993081
  - useradd: revert fix memleak of grp. Resolves: #2020238
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #2024834
  - pwck: fix segfault when calling fprintf()
  - newgrp: fix segmentation fault
  - Clean spec file: organize dependencies and move License location


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-4
changelog:
  - useradd: modify check ID range for system users. Resolves: #2004911
  - Fix release sources
  - Add subid requirement for subid-devel


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-1
changelog:
  - Update to 4.9.1 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-2
changelog:
  - Update to 4.9.1-2 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.2-1
changelog:
  - Update to 4.9.2 
    Resolves: RHEL-101717
    Resolves: RHEL-101718
    Resolves: RHEL-101719
    Resolves: RHEL-101720


author: Jan Jansky <jjansky@redhat.com> = 4.10.0-1
changelog:
  - Update to 4.10.0
    Resolves: RHEL-110500
    Resolves: RHEL-110501
    Resolves: RHEL-110502
    Resolves: RHEL-110503


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Abhi Das <adas@redhat.com> - 4.4-9.git1
changelog:
  - CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    rhbz#2000638


author: Abhi Das <adas@redhat.com> - 4.4-10.git1
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    rhbz#2007304


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2
changelog:
  - Fix the issues reported by covscan (#2103068).
  - Fix SELinux context matching for the deleted paths (#2087693).
  - Fix sloppy FD usage in the bpf test (#2103137).
  - Cater for RHEL 9 license requirement idiosyncrasies (#2103032).


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-1
changelog:
  - Rebase to v6.7; drop upstream patches on top of 5.18 (RHEL-8646).
  - Updated the SPDX license expression.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-2
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65109).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.12-1
changelog:
  - Rebase to v6.12; drop upstream patches on top of 6.7, drop the harcoded
    "-isystem /usr/include" from CPPFLAGS (RHEL-8646).


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 5.58-4
changelog:
  - Stunnel cannot use an encrypted private key being built against OpenSSL 3.0
  - Resolves: rhbz#1976854


author: Clemens Lang <cllang@redhat.com> - 5.62-2
changelog:
  - Fix stunnel in FIPS mode
    Resolves: rhbz#2050617
  - Fail build if tests fail
    Resolves: rhbz#2051083


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2468
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Clemens Lang <cllang@redhat.com> - 5.71-2
changelog:
  - Speed up loading client CA list from CAfile
    Resolves: RHEL-52321
  - Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format
    Resolves: RHEL-52317


author: William Poteat <wpoteat@redhat.com> 1.29.10-1
changelog:
  - Switch dates returned by D-Bus ListInstalledProducts to ISO 8601
    (ptoscano@redhat.com)
  - 1793501: switch dates returned by D-Bus GetPool to ISO 8601
    (ptoscano@redhat.com)
  - Add format_iso8601_date.format_iso8601_date() (ptoscano@redhat.com)
  - Make sure, re-register works for deb repos (suttner@atix.de)
  - 1863039: Fix issue with dnf/yum variables (jhnidek@redhat.com)
  - 1879856: suppress the warning message when setting syspurpose values
    (tmerry@redhat.com)
  - ENT-2779: call format() on translated string (ptoscano@redhat.com)
  - 1930037: cockpit: ensure /etc/pki/product exist (ptoscano@redhat.com)
  - 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Reword ambiguous message (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - cockpit: fix extraction of plural messages (ptoscano@redhat.com)
  - 1672805: 'Addons' is failing spell check and should be changed to 'Add-ons'
    to match documentation (tmerry@redhat.com)
  - 1731109: improve man page & help for registering with --force option
    (tmerry@redhat.com)
  - 1749395: Proper handling when a user does not have an org
    (wpoteat@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1916540: Negative proxy tests occasionally encounter the wrong exception
    handling (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-3711: Fix a couple of typos (tmerry@redhat.com)
  - ENT-2468: Use format strings with named arguments for translator context
    (tmerry@redhat.com)
  - ENT-3276: refactor test_managercli.py by modules (ptoscano@redhat.com)
  - 1897767: what does 'No Valid values provided for usage' mean to the user
    (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Replace optparse with argparse (wpoteat@redhat.com)
  - Fix variable for RestlibException exception (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Correction for condition that was breaking 3 nosetests (wpoteat@redhat.com)
  - maybe this time? (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Remove extra '%' in string (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - cockpit: Adjust for changed services image (martin@piware.de)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (wpoteat@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1897767: what does 'No valid values provided for usage' mean to the user
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1856832: add --org=ORG to the ROLE OPTIONS, USAGE OPTIONS and ADDONS OPTIONS
    (tmerry@localhost.localdomain)
  - 1880920: check for invalid addons (ptoscano@redhat.com)
  - Add AbstractSyspurposeCommand._are_provided_values_valid helper
    (ptoscano@redhat.com)
  - 1924166: improve man text of syspurpose --show (ptoscano@redhat.com)
  - 1646718 debrand a message so that it doesn't say Red Hat Subscription Manager
    but instead an entitlement server (tmerry@localhost.localdomain)


author: William Poteat <wpoteat@redhat.com> 1.29.11-1
changelog:
  - Add subscription-manager dependency to apt-katello-transport (kolb@atix.de)
  - 1898552: refactor/fix collection of IP v4/v6 address info
    (ptoscano@redhat.com)
  - cockpit: Enable TLS for mock insights server (martin@piware.de)
  - adding timoeout to jenkins pipeline (#2585) (jmolet@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1819555: cockpit: translate untranslatable messages (ptoscano@redhat.com)
  - Replace hardcoded errno value with constant (ptoscano@redhat.com)
  - 1940658: bash: complete also the syspurpose subcommand (ptoscano@redhat.com)
  - 1878736: use our i18n functions instead of dnf ones (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.12-1
changelog:
  - 1953069: bash: fix listing of config options (#2609) (ptoscano@redhat.com)
  - Cleanup old *.egg-info dirs in %post (csnyder@redhat.com)
  - 1953047: bash: drop completion for subscribe & unsubscribe
    (ptoscano@redhat.com)
  - 1952228: fix formatting of log error messages (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.13-1
changelog:
  - Updated translations for Korean, Chinese (simiplified, zh_CN), Italian
  - Refactoring of cloud collector/detector and facts (#2515)
    (jhnidek@redhat.com)
  - 1920020: show error message when setting invalid default_log_level as well as
    on every run until changed to a valid value (tmerry@redhat.com)
  - 1959048: improve wording for missing or empty syspurpose values
    (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1960765: fix typo "explicity" in man page (ptoscano@redhat.com)
  - cockpit: Lower cockpit-ws dependency to Recommends (martin@piware.de)
  - test: Robustify and trim down cockpit-ws installation (martin@piware.de)
  - jenkins: switch stylish job to Python 3 (ptoscano@redhat.com)
  - flake8: add more locally found issues (ptoscano@redhat.com)
  - Remove extra whitespace before '(' (ptoscano@redhat.com)
  - 1952879: extract messages from argparse instead of optparse
    (ptoscano@redhat.com)
  - po: set Project-Id-Version to rhsm (ptoscano@redhat.com)
  - po: fuzzy messages with invalid/missing placeholders (ptoscano@redhat.com)
  - po: ko: manually fix placeholder (ptoscano@redhat.com)
  - Update script reference to base branch to main (wpoteat@redhat.com)
  - 1896715: Set proper read permissions on certs (wpoteat@redhat.com)
  - cockpit: Use PF4 based empty state (mmarusak@redhat.com)
  - cockpit: Drop uglification (mmarusak@redhat.com)
  - cockpit: Use 'noreferrer' for external links (mmarusak@redhat.com)
  - cockpit: Add `standard-jsx` eslint plugin (mmarusak@redhat.com)
  - cockpit: Remove loaders for .es6 files (mmarusak@redhat.com)
  - cockpit: Add package-lock.json to .gitignore (mmarusak@redhat.com)
  - build: drop version requirements for pep8 and flake8 (ptoscano@redhat.com)
  - build: remove pyqver test requirement (ptoscano@redhat.com)
  - Add flake8 configuration (ptoscano@redhat.com)
  - Add missing second empty line after class/function (ptoscano@redhat.com)
  - Fix some over-indented code blocks (ptoscano@redhat.com)
  - jenkins: disambiguate virtualenv names (ptoscano@redhat.com)
  - 1956654: Fix issue with proxy and cockpit plugin (jhnidek@redhat.com)
  - Releaser for Centos (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.14-1
changelog:
  - Drop more files/references of old standalone syspurpose tool
    (ptoscano@redhat.com)
  - 1967780: improve placeholders in help text (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1898563: move syspurpose subcommands within the 'syspurpose' command
    (ptoscano@redhat.com)
  - Rename internal variable for syspurpose --show (ptoscano@redhat.com)
  - Drop command name from args when parsing them (ptoscano@redhat.com)
  - 1941904: disable initial-setup in RHEL >= 9 (ptoscano@redhat.com)
  - 1959048: improve wording for invalid syspurpose values (ptoscano@redhat.com)
  - Enable subman to run normally in containers for development/test
    (csnyder@redhat.com)
  - Fixed reporting of AWS cloud facts (null value) (jhnidek@redhat.com)
  - cockpit: Test also system purpose (mmarusak@redhat.com)
  - cockpit: Use current PF4 components and design (mmarusak@redhat.com)
  - test: Update cockpit test/common library (mmarusak@redhat.com)
  - cockpit: Update babel (mmarusak@redhat.com)
  - cockpit: Sync lib/patternfly with Cockpit (mmarusak@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.15-1
changelog:
  - 1941904: actually disable initial-setup in RHEL >= 9, and Fedora too (#2675)
    (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.16-1
changelog:
  - 1941904: remove packages (#2692)
    (31166354+tlhmerry9@users.noreply.github.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Move cloud detector/collector to cloud-what package (#2680)
    (jhnidek@redhat.com)
  - 1975552: add '[SUBMODULE]' in syspurpose usage string (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1973807: fix wording on error when listing syspurpose values (#2684)
    (ptoscano@redhat.com)
  - 1975552: remove extra '[OPTIONS]' from syspurpose usage string (#2682)
    (ptoscano@redhat.com)
  - Make Azure cloud collector more reliable (#2645) (jhnidek@redhat.com)
  - 1967210: Do not print warning, when valid value is provided
    (jhnidek@redhat.com)
  - 1968420: improve description of rhsm.conf format (ptoscano@redhat.com)
  - Delete server repo file (suttner@atix.de)


author: Christopher Snyder <csnyder@redhat.com> 1.29.17-1
changelog:
  - Remove no arch from python3-cloud-what package (csnyder@redhat.com)
  - 1938878: Fix issues discovered by static code analyzers (#2644)
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.18-1
changelog:
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - Slightly improve our container detection (#2611) (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1976225: read lscpu from its JSON output if available (#2699)
    (ptoscano@redhat.com)
  - 1975589: Correct typo in dnf plugin message (wpoteat@redhat.com)
  - 1924126: Fix profile upload on AWS systems (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.19-1
changelog:
  - ENT-4083: Fix flake8 error E402 (mhorky@redhat.com)
  - ENT-4085: Fix flake8 error E713 (mhorky@redhat.com)
  - 2003777: Show available organizations before asking for input
    (mhorky@redhat.com)
  - ENT-4302: Remove "u" prefix from strings (mhorky@redhat.com)
  - ENT-4326: Drop "-*- coding" comment (mhorky@redhat.com)
  - ENT-4277: Drop __future__ imports (mhorky@redhat.com)
  - 1979323: Cockpit - do not show red red icon in SCA mode (jhnidek@redhat.com)
  - Remove outdated comments from the coverage Jenkins job (mhorky@redhat.com)
  - ENT-4252: Migrate from nose to pytest (mhorky@redhat.com)
  - Debian / Ubuntu multi-architectures support
    (sbernhard@users.noreply.github.com)
  - Translated using Weblate (Spanish) (ehespinosa57@gmail.com)
  - 1859157: Display better error message on incorrect --org (mhorky@redhat.com)
  - New D-Bus method GetOrg() (jhnidek@redhat.com)
  - 1924338: list prints not status and dates in SCA mode (jhnidek@redhat.com)
  - 1983144: More useful feedback on unknown argument (mhorky@redhat.com)
  - ENT-4089: Fix flake8 error E741 (mhorky@redhat.com)
  - ENT-4090: Fix flake8 error F821 (mhorky@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - ENT-4091: Fix flake8 error F841 (mhorky@redhat.com)
  - ENT-4228: Format rhsmlib exception (mhorky@redhat.com)
  - ENT-4228: Always format restlib exceptions (mhorky@redhat.com)
  - Update exception handling (mhorky@redhat.com)
  - Drop unused M2Crypto bits (ptoscano@redhat.com)
  - 1995465: Do not use deprecated collections.MutableMapping
    (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1983074: Remove invalid log level (mhorky@redhat.com)
  - ENT-4213: Remove deprecated pep8 package (mhorky@redhat.com)
  - build: switch to os.makedirs(..., exist_ok=True) (ptoscano@redhat.com)
  - build: call create_dest_dir() only when running callback
    (ptoscano@redhat.com)
  - flake8: enable E131, E714 (ptoscano@redhat.com)
  - 1859569: Abort on invalid username/token option in syspurpose commands
    (mhorky@redhat.com)
  - Drop logging.conf (ptoscano@redhat.com)
  - Drop long-dead sat5to6 script (ptoscano@redhat.com)
  - Drop RHN migration (ptoscano@redhat.com)
  - 1922151: Add /var/cache/cloud-what to python3-cloud-what RPM.
    (jhnidek@redhat.com)
  - ENT-164: Remove ga_loader importer (mhorky@redhat.com)
  - ENT-164: Drop rhsm-gtk (mhorky@redhat.com)
  - ENT-164: Drop subscription-manager-gui & rhsm-icon (mhorky@redhat.com)
  - Add minimal documentation for the plugins directories (ptoscano@redhat.com)
  - ENT-4168: Unify description of --org in syspurpose subcommands
    (mhorky@redhat.com)
  - 1922151: Use in-memory cache on AWS too (jhnidek@redhat.com)
  - Move zypper plugins to an own directory (ptoscano@redhat.com)
  - Move dnf plugins to an own directory (ptoscano@redhat.com)
  - Move libdnf plugins to an own directory (ptoscano@redhat.com)
  - Drop support for YUM plugins (ptoscano@redhat.com)
  - Drop YUM plugins (ptoscano@redhat.com)
  - Add 'syspurpose' to list of commands in manpage (mhorky@redhat.com)
  - ENT-4152: Drop initial-setup addon (mhorky@redhat.com)
  - ENT-4136: Drop firstboot support (mhorky@redhat.com)
  - ENT-3764: Change comments to follow Conscious language initiative
    (mhorky@redhat.com)
  - ENT-3764: Update variable names in hwprobe.py (mhorky@redhat.com)
  - ENT-3764: Update project URLs to new versions (mhorky@redhat.com)
  - ENT-3764: Remove BLACKLISTED_LOCALES (mhorky@redhat.com)
  - 1980418: Add 'active' field to module stream profile (ianballou67@gmail.com)
  - repos: document order of --enable & --disable (ptoscano@redhat.com)
  - 1984133: repos: respect order of --enable & --disable (ptoscano@redhat.com)
  - Include D-Bus sender in User-Agent http header; Singleton
    (jhnidek@redhat.com)
  - hwprobe.py: Fix counting cores per cpu for Fujitsu A64FX CPU
    (m.mizuma@jp.fujitsu.com)
  - flake8: enable E121, E122, E123, E126, E127, E128 (ptoscano@redhat.com)
  - flake8: disable E122 for test/test_utils.py (ptoscano@redhat.com)
  - Wrap first argument/element in function calls & containers
    (ptoscano@redhat.com)
  - Fix indentation of some continuation lines (ptoscano@redhat.com)
  - 1974641: Fix tab completion with multiple optional commands
    (mhorky@redhat.com)
  - 1876828: Try to suppress errors in stderr when not run as root
    (mhorky@redhat.com)
  - 1977452: typo in string format change Add quotes to a {filename} and remove
    an extra space. (tmerry@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1976240: Improve HTTP code/message reporting in error strings
    (mhorky@redhat.com)
  - Added new stage for running libdnf unit tests. (jhnidek@redhat.com)
  - make sure gpg key download doesn't fail because of private certs
    (sbernhard@users.noreply.github.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.20-1
changelog:
  - ENT-4279: Switch away from rhsmlib.compat.subprocess_compat
    (mhorky@redhat.com)
  - 2021578: Remove proxy server test as it is unnecessary (wpoteat@redhat.com)
  - cockpit: validate SSL connection to mock-insights (ptoscano@redhat.com)
  - cockpit: fix hostname of the fake Insights server (ptoscano@redhat.com)
  - cockpit: validate the SSL connection to candlepin (ptoscano@redhat.com)
  - cockpit: resolve hostname of service machine (ptoscano@redhat.com)
  - cockpit: use CANDLEPIN_URL consistently (ptoscano@redhat.com)
  - 1719690: Update to message formatting (wpoteat@redhat.com)
  - cockpit: account for missing insights-client on non-RHEL systems
    (ptoscano@redhat.com)
  - cockpit: skip Insights tests on non-RHEL OSes (ptoscano@redhat.com)
  - ENT-4370: Drop old dbus_interface.py (mhorky@redhat.com)
  - ENT-4278: Drop unittest2 imports (mhorky@redhat.com)
  - 1985845: Fix sub-man service-level --show (jhnidek@redhat.com)
  - spec: drop non-systemd support (ptoscano@redhat.com)
  - spec: drop support for Python < 3 (ptoscano@redhat.com)
  - spec: drop support for Fedora < 33 (ptoscano@redhat.com)
  - spec: drop support for RHEL < 8 (ptoscano@redhat.com)
  - spec: drop support for SUSE < 15 (ptoscano@redhat.com)
  - 2015173: chmod /etc/pki/entitlement/*.pem only when existing
    (ptoscano@redhat.com)
  - cockpit: port subscriptions info icons to PF4 icons (kkoukiou@redhat.com)
  - cockpit: translate some untranslated aria-labels (kkoukiou@redhat.com)
  - cockpit: Port Po2JSONPlugin to webpack 5 (kkoukiou@redhat.com)
  - cockpit: stop including PF3 - it's not used anymore (kkoukiou@redhat.com)
  - cockpit: port Insights dialog remaining non PF4 parts (kkoukiou@redhat.com)
  - cockpit: port subscriptions register dialog to Patternfly 4
    (kkoukiou@redhat.com)
  - cockpit: make default TEST_OS rhel-8-4 (kkoukiou@redhat.com)
  - cockpit: port spinners to PF4 spinners (kkoukiou@redhat.com)
  - cockpit: replace custom Revealer component with 'ExpandableSection' from PF4
    (kkoukiou@redhat.com)
  - cockpit: replace pficon and fa classes with svgs form react-icons
    (kkoukiou@redhat.com)
  - cockpit: remove jquery unused dependency (kkoukiou@redhat.com)
  - cockpit: patternfly is a normal dependency - not just dev
    (kkoukiou@redhat.com)
  - cockpit: update patternfly modules and explicitely specify react-icons
    dependency (kkoukiou@redhat.com)
  - cockpit: clean up package.json from unused dependencies and move to webpack 5
    (kkoukiou@redhat.com)
  - webpack: Use relative resolve path for npm 7 compatibility
    (kkoukiou@redhat.com)
  - cockpit: Stop using a custom Select, use the one from PF instead
    (kkoukiou@redhat.com)
  - cockpit: checkout Cockpit's PF/React/build library instead of keeping a
    direct copy of it locally (kkoukiou@redhat.com)
  - cockpit: update npmshrinkwrap file (kkoukiou@redhat.com)
  - Use pytest --forked for D-Bus unit tests (jhnidek@redhat.com)
  - Support of python3 of zypper rhsm script (suttner@atix.de)
  - 2003777: Fix organizations hint in syspurpose commands (mhorky@redhat.com)
  - Small style changes of d-bus server and d-bus unit tests (jhnidek@redhat.com)
  - * Removed GLib.threads_init() (jhnidek@redhat.com)
  - Added cleanup for one patcher; fixed some comments. (jhnidek@redhat.com)
  - cockpit: skip RHEL 9 tests using insights-client (ptoscano@redhat.com)
  - cockpit: fix system installation of subscription-manager
    (ptoscano@redhat.com)
  - cockpit: wait 5 seconds for candlepin at first (ptoscano@redhat.com)
  - cockpit: use the self-signed key in mock-insights (ptoscano@redhat.com)
  - test: Building requires gcc (mmarusak@redhat.com)
  - test: Tell tests about rhel-9 package manager (mmarusak@redhat.com)
  - facts: drop dead/unused code from CleanupCollector (ptoscano@redhat.com)
  - 1989955: use /proc/device-tree/ibm,partition-uuid on POWER LPARs
    (ptoscano@redhat.com)
  - facts: prepare _get_devicetree_uuid() for multiple files
    (ptoscano@redhat.com)
  - facts: refactor device-tree parts of VirtUuidCollector (ptoscano@redhat.com)
  - cockpit: Move from obsolete node-sass to Dart sass (martin@piware.de)
  - Cloud-what: Make saving token file more robust (jhnidek@redhat.com)
  - Fix redundant API calls to Candlepin (hyu@redhat.com)
  - Remove i-notify watchers on the end of the loop (jhnidek@redhat.com)
  - build: pin flake8 to < 4 (ptoscano@redhat.com)
  - Only rpmlint our specfiles (csnyder@redhat.com)
  - Version our obsoletes of syspurpose and the container plugin
    (csnyder@redhat.com)
  - Remove unnecessary comment and sles/suse tests (csnyder@redhat.com)
  - ENT-4273: Drop usage of six.moves (mhorky@redhat.com)
  - ENT-4379: Remove function make_utf8 (mhorky@redhat.com)
  - ENT-4087: Fix flake8 error E722 (mhorky@redhat.com)
  - make spec file SUSE / Open Build Service compliant (p.seiler@linuxmail.org)
  - 2003777: Only hint organizations if it's needed (mhorky@redhat.com)
  - Drop old GUI docs leftovers (ptoscano@redhat.com)
  - tests: drop no more needed rhsm_display (ptoscano@redhat.com)
  - build: remove old specific check for GUI file (ptoscano@redhat.com)
  - Drop async_utils & its tests (ptoscano@redhat.com)
  - Remove rhsm-icon leftovers (ptoscano@redhat.com)
  - build: remove unused detect_overindent function (ptoscano@redhat.com)
  - build: drop lxml leftovers (ptoscano@redhat.com)
  - build: drop Glade leftovers (ptoscano@redhat.com)
  - Add rhsm proxy support to apt-transport-katello (suttner@atix.de)
  - ENT-4289: Drop Sphinx (mhorky@redhat.com)
  - ENT-4340: Resolve deprecation warnings (mhorky@redhat.com)
  - Fixed one unused import of six (jhnidek@redhat.com)
  - ENT-4272: Remove Python 2 conditionals (mhorky@redhat.com)
  - ENT-4274: Remove six.assert* methods (mhorky@redhat.com)
  - ENT-4275: Switch away from six.BytesIO and six.StringIO (mhorky@redhat.com)
  - ENT-4082: Fix flake8 error E265 (mhorky@redhat.com)


