# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-3
changelog:
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-4
changelog:
  - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
  - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
    cache is disabled.
  - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
  - Resolves: RHEL-92054 - Memory leak in
    roles_cache_create_object_from_entry [rhel-10]
  - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
    causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
  - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
    world readable permission
  - Resolves: RHEL-107035 - CWE-532 Created user password hash available to
    see in audit log
  - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
    changed by administrator


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-5
changelog:
  - Resolves: RHEL-101727 - The numSubordinates value is not matching the
    number of direct children.
  - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
  - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
    attributes using custom matching rules
  - Resolves: RHEL-111224 - Error showing local password policy on web UI
  - Resolves: RHEL-112675 - Statistics about index lookup report a wrong
    duration
  - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
  - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
  - Resolves: RHEL-113969 - AddressSanitizer: memory leak in
    memberof_add_memberof_attr


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
    tune should adapt its tuning
  - Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
    allow large groups to stay in the cache
  - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
    across different tools
  - Resolves: RHEL-83274 - Replication online reinitialization of a large
    database gets stalled.
  - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
    IDL scan limit at INT_MAX
  - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
  - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results
  - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
    requests for accounts that do not meet the criteria specified in the
    `pamFilter` option.
  - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
    messages after migrating to LMDB.
  - Resolves: RHEL-96196 - Duplicate/double local password policy entry
    display from redhat directory server webconsole
  - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
    conflicts at once instead of deleting each conflict one after the other
  - Resolves: RHEL-105578 - IPA health check up script shows time skew is
    over 24 hours
  - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
    LMDB is used.
  - Resolves: RHEL-106559 - When deferred memberof update is enabled after
    the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
    be added.
  - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
    not exist
  - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
    groups
  - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
    operation
  - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
  - Resolves: RHEL-115179 - Several password related attributes are not
    replicating from the Replicas to the Masters
  - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
    corruption
  - Resolves: RHEL-116060 - Fix paged result search locking
  - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
  - Resolves: RHEL-117140 - Changelog trimming - add number of scanned
    entries to the log
  - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
  - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
    whole subnets
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
    replication as a consumer
  - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
    in the access logs
  - Resolves: RHEL-123275 - The new ipahealthcheck test
    ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
  - Resolves: RHEL-123663 - Online initialization of consumers fails with
    error -23
  - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
    space char in DN name correctly
  - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
  - Resolves: RHEL-124694 - Access logs are not getting deleted as
    configured.
  - Resolves: RHEL-126535 - memory corruption in alias entry plugin
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
    replicating after importing data from ldif files
  - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
    sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
    389-ds-base-2.6.1-11
  - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
    base-2.6.1-12
  - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-2
changelog:
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-3
changelog:
  - Bump version to 3.2.0-3
  - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
    ou=foo,ou=people,dc=example,dc=com.
  - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
    without restarting slapd
  - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
  - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
    indexes instead of selected ones
  - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
  - Resolves: RHEL-121981 - Setting password history count to 0 does not
    flush history
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication
  - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
    plugin


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-4
changelog:
  - Bump version to 3.2.0-4
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.
  - Resolves: RHEL-133085 - Replica installation is failing with message
    MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
  - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
    Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
  - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
    atomic_compare_exchange()


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-6
changelog:
  - Bump version to 3.2.0-6
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.


author: Viktor Ashirov <vashirov@redhat.com> - 3.3.0-1
changelog:
  - Bump version to 3.3.0
  - Resolves: RHEL-58681 - high wtime can hide a worker reading a large
    requests
  - Resolves: RHEL-62876 - Inconsistencies in the log messages
  - Resolves: RHEL-68692 - Replication halt caused by an incorrect setting of
    "nsslapd-changelogmaxage"
  - Resolves: RHEL-76836 - Crash in replica_config_add when manually
    configuring a replica with an incorrect nsds5ReplicaRoot.
  - Resolves: RHEL-80256 - [RFE] RHDS healthcheck tool could provide more
    information in offline mode
  - Resolves: RHEL-84531 - access log - suspicious wtime  optime negative and
    large values in internal op
  - Resolves: RHEL-86325 - dbscan utility not filtering using -k option
  - Resolves: RHEL-88942 - LDAP healthcheck and ignoring entrydn index and
    associated config
  - Resolves: RHEL-109505 - Possible memory leak when using the Retro
    Changelog plugin.
  - Resolves: RHEL-117666 - [RFE] Expose stats from deferred memberof
  - Resolves: RHEL-118811 - Password policy can be created even though the
    same one already exists
  - Resolves: RHEL-118867 - Memory leak issue in an IPA deployment.
  - Resolves: RHEL-121119 - Differences on export ldif using online of off-
    line method on RHDS
  - Resolves: RHEL-121169 - dsctl should report error when the ldif to import
    doesn't have permissions to be read by dirsrv.
  - Resolves: RHEL-129204 - Local password policies can be created with
    unallowed values
  - Resolves: RHEL-129597 - Remediate "Could not read password attribute"
    error on directory Servers with chaining enabled(DBLink)
  - Resolves: RHEL-132767 - An online reinitialization with LMDB is
    terminating the receiving server
  - Resolves: RHEL-134188 - RFE: add server-side configuration to ignore
    malformed controls and/or override critical controls from clients
  - Resolves: RHEL-138569 - AddressSanitizer: SEGV
    ldap/servers/plugins/automember/automember.c:1962 in
    automember_mod_post_op
  - Resolves: RHEL-140005 - Memory leaks in IPA context on server restart
  - Resolves: RHEL-141049 - Fail open condition in ACL
  - Resolves: RHEL-141480 - [RFE] Add shadowLastChange fixup task
  - Resolves: RHEL-146147 - Fix dsconf to allow specifying multiple
    certificates for use in 389-ds server
  - Resolves: RHEL-149125 - dnaSharedConfig: "dnaPortNum: 0"
  - Resolves: RHEL-151246 - dsctl healthcheck DSMOLE0001 inaccurate
    recommendations when there is more than 1 LDAP backend
  - Resolves: RHEL-152373 - Entry cache DN hash table corruption causes
    SIGSEGV in ns-slapd
  - Resolves: RHEL-153088 - [RFE] Add OS-level thread names to all server
    threads
  - Resolves: RHEL-153089 - [RFE] Add work queue metrics to cn=monitor
  - Resolves: RHEL-153092 - [RFE] Per-operation thread pool context via STAT
    extension
  - Resolves: RHEL-153372 - dirsrv@.service missing NoNewPrivileges and
    MemoryDenyWriteExecute despite broad capability set
  - Resolves: RHEL-154374 - Prevent the ability of creating a replication
    agreement from a node back to itself is needed
  - Resolves: RHEL-154380 - DS 12 does not handle escape char in bind user
  - Resolves: RHEL-157894 - Online export is failing when using the option
    "-s"
  - Resolves: RHEL-163373 - WARN - keys2idl - received NULL idl from
    index_read_ext_allids
  - Resolves: RHEL-165956 - can't modify user's name/dn if it's owner of
    SubIDs
  - Resolves: RHEL-169529 - Rebase 389-ds-base to 3.3.x
  - Resolves: RHEL-170277 - Memory leaks in syncrepl plugin during persistent
    search operations
  - Resolves: RHEL-170643 - passwordbadwords attribute of the local password
    policy is not functioning
  - Resolves: RHEL-170907 - Substring index produces empty results and can
    crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  - Resolves: RHEL-172228 - Replacing a group's member list modifies users
    who were already members
  - Resolves: RHEL-174908 - Replication errors in logs
  - Resolves: RHEL-181022 - Server shutdown during online reindex may lead to
    data loss


author: Nathan Scott <nathans@redhat.com> - 0.11.8-1
changelog:
  - Update to latest upstream version.
  - Update spec file and resolve a build issue (BZ 2113091).
  - Switch to SPDX licensing.


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102774)
  - Allow setting IP method to disabled in port connections (RHEL-90756)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102318)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.55.4-1
changelog:
  - Update to 1.55.4 (dev)
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
  - Add support for a DHCP client-id kernelarg (RHEL-108454)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.55.90-1
changelog:
  - Update to 1.56.0 (rc1)
  - Support setting protocol version of HSR/PRP (RHEL-100764)
  - Support interlink for HSR/PRP (RHEL-100768)
  - Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
  - Improve logging of networking off (RHEL-103925)
  - Don't delete unrelated OVS ports (RHEL-120176)


author: Ján Václav <jvaclav@redhat.com> - 1:1.56.1-1
changelog:
  - Update to 1.56.1
  - fix handling onlink route flag for ECMP routes (RHEL-1402)
  - Add Geneve support (RHEL-122042)
  - Add support for persistently un/managing devices (RHEL-142555)


author: Josephine Pfeiffer <josie@redhat.com> - 1:1.58~rc1-1
changelog:
  - Update to 1.58-rc1 release
  - Add IPv6-mostly support with CLAT via a BPF program (RHEL-93551)
  - Keep permissive modify.system polkit defaults for RHEL 10 minor compatibility
  - Warn about gateways that are not directly reachable (RHEL-126543)
  - Fix suppressing DHCPv6 DNS servers with ipv6.ignore-auto-dns on reapply (RHEL-149149)
  - Fix sending DHCP release on bridge interfaces (RHEL-126455)
  - Allow selecting from available devices when creating profiles in nmtui (RHEL-129186)
  - Fix AVC error when running NetworkManager --print-config as systemd service (RHEL-140113)
  - Fix invalid default value of the bond arp_missed_max option (RHEL-182559)
  - Fix RPM scriptlet dependencies for udev-less container installs


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-119641)
  - Esp param properly exported (RHEL-119653)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
  - Support leftprotoport and rightprotoport options. (RHEL-130888)
  - Fix error on duplicate key 'phase2alg'. (RHEL-128213)
  - Fix import connection with RSA key. (RHEL-125174)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.34-1
changelog:
  - Update to 2.0.34 (rhbz#2105023)
  - Resolve issues found by rpmdiff
    - add a patch to fix getaddrinfo detection to avoid using gethostbyname
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
  - Conditional Perl & Python module build, by default disabled


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-6
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [RHEL-40966]
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [RHEL-40966]
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [RHEL-40966]
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [RHEL-40966]
  - Resolves: RHEL-40966
    ([Azure][WALA][RHEL-10] Provisioning failed if no ifcfg-eth0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-7
changelog:
  - wla-skip-cgorup-monitor-2939.patch [RHEL-46713]
  - Resolves: RHEL-46713
    ([Azure][RHEL-10][WALA] waagent -collect-logs doesn't work and the log is confusing)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-9
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-68796]
  - Resolves: RHEL-68796
    (Please add `mana` to 99-azure-unmanaged-devices.conf of Azure image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-10
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [RHEL-84073]
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-84073]
  - Resolves: RHEL-84073
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.13.1.1-2
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-109465]
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-96792]
  - Resolves: RHEL-109465
    ([Azure][RHEL-10][WALA][Image mode] Cannot find 'service' command)
  - Resolves: RHEL-96792
    ([Azure][WALA][RHEL-10] Missing man page)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-2
changelog:
  - wla-Remove-the-10-azure-unmanaged-sriov.rules-to-avoid-c.patch [RHEL-114155]
  - Resolves: RHEL-114155
    ([Azure][WALA][RHEL-10] Remove 10-azure-unmanaged-sriov.rules)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-3
changelog:
  - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82243]
  - Resolves: RHEL-82243
    ([Azure][image mode][WALA][RHEL-10] Unable to setup the persistent firewall rules)


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  - rebase to 0.19.2
  Resolves: RHEL-110572
  - exclude directory but include subitems
  Resolves: RHEL-1382
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1383
  - Switch to libnettle for hashing
  Resolves: RHEL-59170


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-2
changelog:
  - Modernize aide config file
  Resolves: RHEL-39970
  - No path reference ends with '/'
  Resolves: RHEL-39959


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-3
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  - Do not monitor link count in /var/log/journal
  Resolves: RHEL-39970


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-6
changelog:
  - Add aide-migrate-config to automate config migration from pre-0.19 syntax
  Resolves: RHEL-178837
  - Re-add syslog_format config option dropped during rebase to 0.19.2


author: Patrik Koncity <pkoncity@redhat.com> - 0.19.2-7
changelog:
  - Support for included files in /etc/aide.d/
  Resolves: RHEL-141673
  - Increase default values for num_workers
  Resolves: RHEL-141678
  - Add pre-configured systemd timer for aide check
  Resolves: RHEL-123520


author: Jaroslav Kysela <perex@perex.cz> - 1.2.7.1-4
changelog:
  - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org>
  - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com>
  - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com>
  - CI test & RHEL cleanups


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250314-15
changelog:
  - accel: ivpu: Update firmware for NPU (RHEL-38586)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
  - rtw89: 8922a: update fw to v0.35.64.0
  - rtw89: 8922a: update fw to v0.35.63.0
  - rtw89: 8852c: update fw to v0.27.125.0
  - iwlwifi: add Bz/gl FW for core94-91 release
  - iwlwifi: update ty/So/Ma firmwares for core94-91 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update gc 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update gc 10.3.7 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - qcom: Update gpu firmwares for qcs8300 chipset
  - linux-firmware: add firmware for qat_420xx devices
  - amdgpu: DMCUB updates for various ASICs
  - i915: Update Xe3LPD DMC to v2.20
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250305133215
  - mediatek MT7920: update bluetooth firmware to 20250210151502
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - intel_vpu: Add firmware for 37xx and 40xx NPUs
  - QCA: Add Bluetooth firmwares for QCA2066 with USB transport
  - QCA: Add two bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
  - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
  - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
  - ASoC: tas2781: Update dsp firmware for Gemtree project
  - xe: Update GUC to v70.40.2 for BMG, LNL
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DCUB update for DCN401 and DCN315
  - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7920 WiFi device
  - qca: update WCN3988 firmware
  - amdgpu: Update ISP FW for isp v4.1.1
  - qcom: add firmware for Adreno A225
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - i915: Update Xe3LPD DMC to v2.17
  - ASoC: tas2781: Change regbin firmwares for single device
  Resolves: RHEL-38586


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250521-16
changelog:
  - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
  - Add amdnpu linux firmware folder (RHEL-77950)
  - Introduce new PMF TA (RHEL-86837)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
  - Adjust QUPv3 driver name
  - cnm: Add Chips&Media wave633c firmware for NXP i.MX9
  - qcom: add QUPv3 firmware for QCM6490 platform
  - mediatek: Add mt8196 VCP firmware
  - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
  - nvidia: add GSP-RM version 570.144 firmware images
  - amdgpu: DMCUB updates for various ASICs
  - powervr: add firmware for Imagination Technologies BXS-4-64 GPU
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
  - brcmfmac: Add a couple of NanoPi devices
  - rtl_nic: add firmware rtl8127a-1
  - cnm: update chips&media wave521c firmware.
  - intel_vpu: Update NPU firmware
  - intel: avs: Update topology file for Digital Microphone Array
  - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
  - linux-firmware: Amphion: Update vpu firmware
  - amd_pmf: Update AMD PMF TA Firmware to v3.1
  - amdgpu: update dcn 4.01 firmware to 0.1.8.0
  - qcom: Add link for SM8350 GPU firmware
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250425073330
  - rtw89: 8852c: add tables for dynamic antenna TXPWR
  - rtw89: 8922a: update fw to v0.35.71.0
  - brcm: Add NVRAM file for Radxa Rock Pi X mini PC
  - i915: Update Xe3LPD DMC to v2.23
  - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - qcom: vpu: update video firmware binary for SA8775p
  - iwlwifi: add Bz/gl FW for core95-82 release
  - iwlwifi: update ty/So/Ma firmwares for core95-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
  - iwlwifi: add Bz-hr FW for core93-123 release
  - qcom: add QUPv3 firmware for QCS9100 platform
  - ASoC: tas2781: Swap channel for SPI projects.
  - bmi260: Add BMI260 IMU initial configuration data file
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
  - rtw89: 8922a: update element RF TXPWR to R40
  - rtw89: 8852c: update element RF TXPWR to R78
  - rtw89: 8852c: add fw v0.27.125.0 with format version 2
  - Revert "rtw89: 8852c: update fw to v0.27.125.0"
  - qcom: vpu: add video firmware binary for qcm6490
  - contrib: process_linux_firmware: set user agent
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update dcn 4.01 frmware to 0.1.6.0
  - intel: ish: Update license file for ISH
  - intel: avs: Update topology file for I2S Analog Devices 4567
  - intel: avs: Update topology file for I2S Realtek 5663
  - intel: avs: Update topology file for I2S Realtek 5640
  - intel: avs: Update topology file for I2S Realtek 5514
  - intel: avs: Update topology file for I2S Realtek 298
  - intel: avs: Update topology file for I2S Realtek 286
  - intel: avs: Update topology file for I2S Realtek 274
  - intel: avs: Update topology file for I2S Nuvoton 8825
  - intel: avs: Update topology file for I2S Maxim 98927
  - intel: avs: Update topology file for I2S Maxim 98373
  - intel: avs: Update topology file for I2S Maxim 98357a
  - intel: avs: Update topology file for HDAudio codecs
  - intel: avs: Update topology file for HDMI codecs
  - intel: avs: Update topology file for Digital Microphone Array
  - intel: avs: Update topology file for I2S Dialog 7219
  - xe: Update GUC to v70.44.1 for BMG and LNL
  - i915: Update GUC to v70.44.1 for i915 platforms
  - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
  - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
  - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
  - QCA: Add 8 bluetooth nvm files for WCN785x btusb
  - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
  - qcom: update firmware binary for SM8250
  - mediatek: Add new mt8195 SOF firmware
  - mediatek: Add new mt8188 SOF firmware
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
  - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
  - intel_vpu: Update NPU firmware
  - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
  - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
  - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
  - amdgpu: update dcn 4.01 firmware to 0.1.3.0
  - amdgpu: update dcn 3.5 firmware to 0.1.0.0
  - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
  - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
  - qcom: Add DSP firmware for QCS8300 platform
  - mediatek: Add MT8188 SCP firmware
  - copy-firmware: fail gracefully if moreutils parallel is installed
  - copy-firmware: make script smarter about bad parameters
  - copy-firmware: add usage help text
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add Audio firmware for Lenovo Slim 7x
  - qcom: Add Audio firmware for Lenovo T14s
  - amdgpu: DMCUB updates for various ASICs
  Resolves: RHEL-85120, RHEL-77950, RHEL-86837


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250604-17
changelog:
  - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Update GUC to v70.45.2 for BMG, LNL
  - i915: Update GUC to v70.45.2 for DG2
  - xe: Update LNL GSC to v104.0.5.1429
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS8300 platform
  - Intel IPU7: Add firmware binary files
  - ice: update wireless_edge package to 1.3.23.0
  - ice: update comms package to 1.3.55.0
  - ice: update package to 1.3.43.0
  - linux-firmware: Update firmware file for Intel Pulsar core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel Quasar core
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - iwlwifi: add Bz/gl FW for core96-76 release
  - iwlwifi: update ty/So/Ma firmwares for core96-76 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
  - iwlwifi: update firmwares for 8000 series
  - iwlwifi: update 7265D firmware
  - mediatek MT7925: update bluetooth firmware to 20250526153203
  - linux-firmware: update firmware for MT7925 WiFi device
  - qcom: sc8280xp: FW blob updates for X13s
  - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - cirrus: cs35l41: Fix firmware links for several ASUS laptops
  Resolves: RHEL-92555


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250708-18
changelog:
  - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
  - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Add fan_control v203.0.0.0 for BMG
  - amdgpu: Add DCN 3.6
  - amdgpu: Add PSP 14.0.5
  - amdgpu: Add SDMA 6.1.3
  - amdgpu: Add GC 11.5.3
  - mediatek MT7921: update bluetooth firmware to 20250625154126
  - qcom/adreno: document firmware revisions
  - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - Revert "linux-firmware: Update firmware file for Intel Pulsar core"
  - qcom/adreno: sort entries in WHENCE
  - xe: First HuC release for Pantherlake
  - xe: First GuC release for Pantherlake
  - linux-firmware: update firmware for MT7921 WiFi device
  - rtw89: 8922a: update fw to v0.35.80.0
  - rtw89: 8852c: update fw to v0.27.129.1
  - rtw89: 8852c: update fw to v0.27.128.0
  - WHENCE: extract license texts
  - WHENCE: expand the advansys license statement
  - WHENCE: some older AMD drivers are MIT licensed
  - qcom: update firmware binary for SM8550
  - amdgpu: DMCUB updates for DCN401
  - qcom: venus-5.4: add the firmware binary for qcs615
  - Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
  - amdgpu: update dmcub fw for dcn401
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - brcm: Fix symlinks for Khadas VIM SDIO wifi config
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: add raven2 ip discovery firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update sdma 7.0.0 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: add picasso ip discovery firmware
  - amdgpu: add raven ip discovery firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: add smu 13.0.0 kicker firmware
  - amdgpu: add psp 13.0.0 kicker firmware
  - amdgpu: add gc 11.0.0 kicker firmware
  - amdgpu: add vcn 5.0.1 firmware
  - amdgpu: add sdma 4.4.4 firmware
  - amdgpu: add psp 13.0.12 firmware
  - amdgpu: add gc 9.5.0 firmware
  - amdgpu: add arcturus IP discovery firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige_goby firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - WHENCE: fix subtly incorrect licensing
  - amdgpu: update dmcub fw for dcn32 and dcn401
  - mediatek: Update mt8186 SCP firmware
  - amdgpu: Update DMCUB fw for DCN401 & DCN315
  - WHENCE: unify Driver statements
  - qcom: add gpu firmwares for X1P42100 chipset
  - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
  - rtl_nic: update firmware of RTL8153A
  - qcom: sc8280xp: Updated power FW for X13s
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for MT7981
  - linux-firmware: update firmware for MT7916
  - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
  - Revert "iwlwifi: add Bz/gl FW for core96-76 release"
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7922: update bluetooth firmware to 20250523103438
  - mediatek MT7921: update bluetooth firmware to 20250523111333
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  Resolves: RHEL-95393, RHEL-100947


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250812-19
changelog:
  - Update linux-firmware to latest upstream (RHEL-108921)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: DMCUB updates for various ASICs
  - panthor: Add firmware for more Mali GPUs
  - amdgpu: update renoir firmware
  - amdgpu: add SMU 14.0.3 kicker firmware
  - amdgpu: add PSP 14.0.3 firmware
  - amdgpu: add GC 12.0.1 kicker firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update SDMA 6.1.2 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SDMA 7.0.1 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update SDMA 7.0.0 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update GC 10.3.7 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
  - qcom: Add QDSP firmware file for Qualcomm QDU100 device.
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: Update xbl_config firmware file.
  - amdgpu: Update GCN 4.0.5 microcode
  - amdgpu: Update SDMA 6.1.0 microcode
  - amdgpu: Update GC 11.5.0 microcode
  - qcom: Add QDU100 firmware image files required for booting.
  - linux-firmware: Add firmware for airoha-npu driver
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250721233113
  - qcom: Update DSP firmware for qcm6490 platform
  - qcom: update Venus firmware file for v6.0
  - i915: Xe3LPD DMC v2.29
  - linux-firmware: Update AMD cpu microcode
  - qcom: Add QCS6490 symlink for QUPv3 firmware
  - qcom: Add firmware binary for SM8750.
  - amdgpu: update dmcub fw for dcn314
  - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
  - cirrus: cs35l41: Update Firmware for Dell Oasis
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - qcom: Add Audio topology for QCS6490 RB3Gen2
  - intel_vpu: Update NPU firmware
  - amdgpu: update dmcub fw for various DCN version
  - WHENCE: extract more license statements
  - WHENCE: clarify io_ti origin
  - amdgpu: Update GC 11.5.1 microcode
  - rtw89: 8852b: update fw to v0.29.128.0
  - rtw89: 8852bt: update fw to v0.29.127.0
  - rtw89: 8922a: add regd fw element with version R72-R6
  - rtw89: 8852c: add regd fw element with version R72-R57
  - rtw89: 8922a: update BB parameter V49
  - qcom: Update gpu firmwares of QCS615 chipset
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  Resolves: RHEL-108921


author: Denys Vlasenko <dvlasenk@redhat.com> - 20251111-20
changelog:
  - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
  - AMDGPU: Update firmware for Strix Halo (RHEL-104078)
  - AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
  - Update linux-firmware to latest upstream
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
  - rtw88: 8822b: Update firmware to v30.20.0
  - rtl_nic: add firmware rtl8125k-1
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add SOCCP firmware for kaanapali platform
  - xe: Update GUC to v70.53.0 for BMG, LNL, PTL
  - i915: Update GUC to v70.53.0 for DG2, MTL
  - rtw89: 8851b: update fw to v0.29.41.5
  - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
  - rtw89: 8852b: update fw to v0.29.29.14
  - Revert "rtw89: 8852b: update fw to v0.29.128.0"
  - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
  - rtw89: 8852bt: update fw to v0.29.122.1
  - Revert "rtw89: 8852bt: update fw to v0.29.127.0"
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251015213201
  - rtl_bt: Add firmware and config files for RTL8761CUV
  - linux-firmware: Update AMD cpu microcode
  - qcom: add ADSP firmware for kaanapali platform
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
  - mediatek MT7920: update bluetooth firmware to 20251020151255
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7920 WiFi device
  - amd-ucode: Fix minimum revisions in README
  - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
  - mediatek MT7922: update bluetooth firmware to 20251020143443
  - Revert "linux-firmware: update firmware for MT7922 WiFi device"
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
  - iwlwifi: add Bz/Fm and gl FW for core98-161 release
  - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
  - iwlwifi: update ty/So/Ma firmwares for core98-161 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
  - intel: qat: Fix missing link
  - amdgpu: DMCUB updates for various ASICs
  - nvidia: add generic bootloader for GSP-enabled systems
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
  - qcom: vpu: rename firmware binaries
  - Intel IPU7: Update product signed firmware binary
  - i915: Xe2LPD DMC v2.29
  - i915: Xe3LPD DMC v2.32
  - i915: Xe3LPD_3002 DMC v2.27
  - WHENCE: nvidia: rearrange GSP-RM firmware lines
  - linux-firmware: Add ISH firmware file for Intel Pather Lake platform
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: add CDSP firmware for kaanapali platform
  - qcom: add version for A650 GMU firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
  - qcom: Add firmwares for Kaanapali GPU
  - qcom: Update A623 GMU fw
  - qcom: Fix QCS615 chipset's GPU secure fw
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: DMCUB updates for various ASICs
  - WHENCE: remove link for Kaanapali video firmware
  - intel_vpu: Update NPU firmware
  - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
  - Update VCN for Navi1x, Green Sardine and Renoir
  - WHENCE: extract multitech license text
  - WHENCE: extract ueagle license
  - WHENCE: use LICENCE.sensoray for s2255drv
  - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
  - WHENCE: clean up emi62 and yam license statements
  - qcom: vpu: update video firmware binary for SM8550
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
  - qcom: vpu: add video firmware for Kaanapali
  - qcom: Update DSP firmware for qcs8300 platform.
  - qcom: Add Audio topology for HAMOA-EVK
  - intel/ish:Add ISH firmware file for Intel Lunar Lake platform
  - mediatek: update firmware version info for MT7986/81/16
  - linux-firmware: ql2500_fw: update ISP25xx Firmware
  - qcom: Update aic100 firmware files
  - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
  - amdgpu: DMCUB updates for various ASICs
  - mediatek: mtk_wed: drop links for mt7988
  - Revert "amdgpu: update gc 10.3.6 firmware"
  - qcom: Update DSP firmware for qcs8300 platform.
  - powervr: update firmware for Imagination Technologies BXS-4-64 GPU
  - qcom: Update DSP firmware for sa8775p platform.
  - amdgpu: DMCUB updates for various ASICs
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - qcom: move LEMANS EVK firmware to correct location
  - amdgpu: update PSP 14.0.3 kicker firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update VPE 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update SMU 13.0.0 kicker firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update SDMA 6.1.3 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update VPE 6.1.3 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - amdgpu: DMCUB updates for various ASICs
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - mediatek MT7922: update bluetooth firmware to 20250903123504
  - linux-firmware: update firmware for MT7922 WiFi device
  - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
  - qcom: Add Audio topology for MONACO-EVK
  - qcom: add CDSP firmware for qcs615 platform
  - qcom: Add Audio topology for LEMANS-EVK
  - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
  - qcom: vpu: update firmware binaries to fix encoder drain handling
  - intel_vpu: Update NPU firmware
  - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
  - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
  - xe: Update GUC to v70.49.4 for BMG, LNL, PTL
  - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
  - qcom: add ADSP firmware for qcs615 platform
  - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
  - iwlwifi: add Bz-HR FW for core90-93 release
  - Fix link entry for qat_895xcc.bin
  - Move QAT firmware to intel/ subdirectory
  - Move all iwlwifi top level files to intel/ directory
  - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
  - ath11k: Support WCN6855 hw2.1 with NFA firmware variant
  - amdgpu: Update ISP FW for isp v4.1.1
  - Update README.md to clarify S-o-b requirements
  - firmware: qcom: Reorder VPU firmware entries in WHENCE
  - intel_vpu: Update NPU firmware
  - amdgpu: DMCUB updates for various ASICs
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - cirrus: cs35l41: Move entries to correct driver section in WHENCE
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - qcom: Add firmware binary for SM8650.
  - Link rtl8723b_config.bin to rtl8723bs
  - rtw89: 8922a: update fw to v0.35.80.3
  - rtw89: 8852c: update fw to v0.27.129.4
  - rtw89: 8852c: update fw to v0.27.129.3
  - qcom: add CDSP firmware for x1e80100 platform
  - iwlwifi: add Bz/gl FW for core97-84 release
  - iwlwifi: update ty/So/Ma firmwares for core97-84 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
  - amdgpu: DMCUB updates for various ASICs
  - realtek: rt1321: Add patch firmware of MCU
  - mediatek: Add MT8189 SCP firmware
  Resolves: RHEL-117675, RHEL-104078, RHEL-107606


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260107-21
changelog:
  - Update linux-firmware to latest upstream (RHEL-119866)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: Update aic100 firmware files
  - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
  - firmware: Revert kernel_boot.elf due to license compliance issue
  - linux-firmware: add firmware for an8811hb 2.5G ethernet phy
  - i915: Xe3LPD_3002 DMC v2.28
  - i915: Xe3LPD DMC v2.33
  - intel_vpu: Add firmware for 50xx NPUs and update older ones
  - linux-firmware: Update AMD SEV firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: venus-5.4: fix ELF segment alignment to 4 bytes
  - mediatek MT7925: update bluetooth firmware to 20251210093205
  - linux-firmware: update firmware for MT7925 WiFi device
  - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
  - qcom: Update CDSP firmware for qcm6490 platform
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
  - linux-firmware: Add firmware file for Intel Scorpius core
  - rtw89: 8852b: update fw to v0.29.29.15
  - cirrus: cs35l41: Update firmware and tuning for various HP laptops
  - cirrus: cs35l41: Add support for new HP Clipper laptop
  - qcom: drop compatibility a640_zap.mdt symlink
  - qcom: add version for a530v3_gpmu.fw2
  - xe: Update GUC to v70.55.3 for BMG, PTL
  - iwlwifi: add Bz/Sc FW for core101-82 release
  - iwlwifi: Add Sc/Gf firmware for core101-82 release
  - iwlwifi: update ty/So/Ma firmwares for core101-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Add firmwares for sm8150 GPU
  - qcom: Add firmwares for sm8450 GPU
  - qcom: Add firmwares for sm8550 GPU
  - qcom: Add firmwares for sm8650 GPU
  - qcom: Add firmwares for sm8750 GPU
  - Makefile: add licence header
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - cirrus: cs35l41: Add support for new HP laptops
  - Revert "amdgpu: update GC 11.5.0 firmware"
  - linux-firmware: Update amd-ucode copyright information
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: update ADSP firmware for x1e80100 platform, change the license
  - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
  - Reapply "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update GC 10.3.6 firmware"
  - Revert "amdgpu: update GC 11.5.1 firmware"
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251124093155
  - intel_vpu: Update NPU firmware
  - WHENCE: fix version string for video firmware
  - qcom: vpu: update video firmware binary for SM8250
  - xe: Update GUC to v70.54.0 for BMG, PTL
  - Revert "amdgpu: update GC 11.0.1 firmware"
  - QCA: Add Bluetooth firmware for WCN685x uart interface
  - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
  - qcom: venus-5.4: update firmware binary for v5.4
  - qcom: venus-5.4: remove unused firmware file
  - iwlwifi: add Sc/Wh FW for core98-181 release
  - amdgpu: DMCUB updates for various ASICs
  - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
  - ASoC: tas2781: Add more symbol links on SPI devices
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update renoir firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SMU 14.0.3 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update smu 13.0.0 kicker firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add vce1 firmware
  - mediatek MT7922: update bluetooth firmware to 20251118163447
  - linux-firmware: update firmware for MT7922 WiFi device
  - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
  - qcom: add ADSP, CDSP firmware for sm8750 platform
  - rtl_nic: add firmware rtl9151a-1
  - qcom: Update aic100 firmware files
  - mt76: add firmware for MT7990
  - mt76: update firmware for MT7992
  - mt76: update firmware for MT7996
  - cirrus: cs35l57: Add firmware for a few Dell products
  - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
  - qcom: Add sdx35 Foxconn vendor firmware image file
  - linux-firmware: Update AMD cpu microcode
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  Resolves: RHEL-119866


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260130-22
changelog:
  - Update linux-firmware to latest upstream (RHEL-145527)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
  - Intel IPU7: Update firmware binary for Panther Lake
  - linux-firmware: update firmware for MT7921 WiFi device
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
  - linux-firmware: Add firmware for airoha-npu-7583 driver
  - iwlwifi: add Bz/Sc FW for core102-56 release
  - iwlwifi: Add Hr/Gf firmware for core102-56 release
  - iwlwifi: update ty/So/Ma firmwares for core102-56 release
  - xe: Add GSC 105.0.2.1301 for PTL
  - mediatek: rename MT8188 SCP firmware
  - qcom: Update DSP firmware for QCM6490 platform
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20260106153314
  - mediatek MT7920: update bluetooth firmware to 20260105151350
  - mediatek MT7922: update bluetooth firmware to 20260106153735
  - linux-firmware: update firmware for MT7922 WiFi device
  - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
  - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
  - qcom: Update DSP firmware for sa8775 platform
  - QCA: Add Bluetooth firmware for QCC2072 uart interface
  - i915: Xe3p_LPD DMC v2.33
  - qcom: Update DSP firmware for qcs8300 platform
  - linux-firmware: update firmware for MT7920 WiFi device
  Resolves: RHEL-145527


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260508-23
changelog:
  - Update linux-firmware to latest upstream (RHEL-154363)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Add firmware for Lontium LT9611C
  - xe: Update GUC to v70.65.0 for LNL, BMG, PTL
  - amdgpu: update SMU 14.0.3 kicker firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update SDMA 6.1.3 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update VPE 6.1.3 firmware
  - amdgpu: update SDMA 6.1.2 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update SDMA 4.4.4 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update SDMA 4.4.5 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update VPE 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update VPE 6.1.0 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update renoir firmware
  - amdgpu: update aldebaran firmware
  - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
  - amdgpu: DMCUB updates for various ASICs
  - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
  - qcom: update ADSP firmware for x1e80100 platform
  - linux-firmware:Add firmware for Lontium LT7911EXC bridge
  - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
  - qcom: Update CDSP firmware for Kaanapali platform
  - qcom: vpu: add Gen2 firmware binary for Agatti
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Add firmware file for Intel BlazarIW
  - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
  - linux-firmware: Add firmware file for Intel BlazarIGfp2 core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Update ADSP firmware for Glymur platform
  - mediatek MT7925: update bluetooth firmware to 20260414153243
  - linux-firmware: update firmware for MT7925 WiFi device
  - Revert "linux-firmware: Update firmware file for Intel Quasar core"
  - qcom: Add gpdspr.jsn for qcs8300 platform
  - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
  - ath12k: QCC2072 hw1.0: add board-2.bin
  - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
  - ath12k: IPQ5424 hw1.0: add board-2.bin
  - qcom: Update ADSP firmware for Kaanapali platform
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
  - amdgpu: DMCUB updates for DCN36
  - linux-firmware: Update AMD cpu microcode
  - powervr: update Imagination Rogue firmware images
  - qcom: Update ADSP firmware for Kaanapali platform
  - i915: Xe3LPD DMC v2.34
  - i915: Xe3LPD_3002 DMC v2.29
  - qcom: Update ADSP firmware for QCM6490 platform
  - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
  - mediatek: vpu: drop old sym link
  - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
  - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
  - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
  - intel_vpu: Update NPU firmware
  - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
  - nvidia: add acr/bl symlink for booting GSP-RM on GA100
  - qcom: add QUPv3 firmware for shikra
  - xe: Update GUC to v70.60.0 for LNL, BMG, PTL
  - qcom: update ADSP firmware for sm8750 platform
  - qcom: update CDSP firmware for glymur platform
  - cirrus: cs35l41: Add support for new HP laptops
  - cirrus: cs35l41: Add support for new ASUS laptops
  - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
  - WHENCE: Move Dell remoteproc firmware to correct section
  - qcom: vpu: add video firmware for SM8450
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - iwlwifi: add Bz/Sc FW for core103-40 release
  - iwlwifi: Add Hr/Gf firmware for core103-40 release
  - iwlwifi: update ty/So/Ma firmwares for core103-40 release
  - amdgpu: DMCUB updates for various ASICs
  - xe: Update PTL GSC to v105.0.2.1397
  - linux-firmware: add firmware for Moxa mux50u devices
  - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
  - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - linux-firmware: update firmware for qat_4xxx devices
  - linux-firmware: update firmware for qat_402xx devices
  - linux-firmware: update firmware for qat_420xx devices
  - linux-firmware: update firmware for an8811hb 2.5G ethernet phy
  - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
  - amdgpu: DMCUB updates for various ASICs
  - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
  - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
  - linux-firmware: Add firmware file for Intel BlazarIW
  - linux-firmware: Add firmware file for Intel BlazarIGfp2 core
  - iwlwifi: add Bz/Wh FW for core102-56 release
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
  - mediatek MT7921: update bluetooth firmware to 20260224111243
  - mediatek MT7920: update bluetooth firmware to 20260224111231
  - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
  - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
  - linux-firmware: update firmware for MT7920 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: Update firmware file for Intel Quasar core
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - intel_vpu: Update NPU firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS615 platform
  - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
  - mediatek MT7922: update bluetooth firmware to 20260224103448
  - linux-firmware: update firmware for MT7922 WiFi device
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
  - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Add firmware file for Intel BlazarIGfp2 core
  - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
  - qcom: Update CDSP firmware for QCM6490 platform
  - linux-firmware: add firmware for Lontium LT8713SX DP hub
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
  - qcom: update ADSP, CDSP firmware for sm8750  platform
  - qcom: update ADSP dtb.mbn for glymur platform
  - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update SDMA 6.1.3 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update SDMA 6.1.2 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SMU 14.0.3 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update VPE 6.1.0 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
  - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
  - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
  - amdnpu: Restore old NPU firmware for compatibility
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
  - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
  - linux-firmware: update firmware for MT7902 BT device
  - linux-firmware: update firmware for MT7902 WiFi device
  - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Update DSP firmware for qcs8300 platform
  - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: DMCUB updates for various ASICs
  - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
  - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
  - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
  - rtw89: 8852b: update txpwr element to R43
  - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
  - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
  - xe: Update GUC to v70.58.0 for LNL, BMG, PTL
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - qcom: Add gpu firmwares for Glymur chipset
  - amdgpu: DMCUB updates for various ASICs
  - qcom: vpu: add video firmware for Glymur
  - qcom: add QUPv3 firmware for x1e80100 platform
  - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
  - Bluetooth: Add symbolic links for Intel Solar firmware variants
  - Bluetooth: Add symbolic links for Intel Pulsar firmware variants
  - Bluetooth: Add symbolic links for Intel AX201 firmware variants
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - qcom: add ADSP, CDSP firmware for glymur platform
  - ASoC: tas2783: Add Firmware files for tas2783A
  - linux-firmware: Update firmware file for Intel Solar core
  - mediatek MT7921: update bluetooth firmware to 20251223091725
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - WHENCE: Correct 2 trailing whitespaces
  - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
  - linux-firmware: Add Dell ISH firmware for Intel panther lake systems
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
  - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
  - ice: update DDP LAG package to 1.3.2.0
  - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
  - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
  - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
  - Update firmware for NPU PHX, STX and STX HALO
  - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
  - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
  - amdgpu: DMCUB updates for various ASICs
  Resolves: RHEL-154363


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260624-24
changelog:
  - Update linux-firmware to latest upstream (RHEL-154363)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - nxp: add firmware for IW61x WiFi device
  - mediatek MT7922: update bluetooth firmware to 20260605203811
  - mediatek MT7925: update bluetooth firmware to 20260605184935
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for MT7922 WiFi device
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add LPAICP firmware for shikra platform
  - qcom: Add qdsp6sw firmware for shikra platform
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for MT7981
  - linux-firmware: update firmware for MT7996
  - linux-firmware: update firmware for MT7992
  - linux-firmware: update firmware for MT7990
  - qcom: Update ADSP firmware for Kaanapali platform
  - qcom: update ADSP firmware for glymur platform
  - qcom: update CDSP firmware for glymur platform
  - QCA: Add bluetooth firmware nvm files for USI/NFA725B
  - linux-firmware: Add firmware file for Intel BlazarIW
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel Scorpius core
  - qcom: update ADSP firmware for qcs615 platform
  - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
  - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
  - realtek: rt1321: Update the patch code to v1.10
  - amdgpu: DMCUB updates for various ASICs
  - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
  - qcom: update CDSP firmware for shikra platform
  - qcom: Update ADSP firmware for Glymur platform
  - Remove any files with unknown licenses
  - AGENTS.md, README: address second round of MR review
  - README: document AI assisted contribution convention
  - AGENTS.md: clarify areas raised in MR review
  - Add AGENTS.md for AI coding agents
  - LICENSES: update GPL-2.0 text and references
  - LICENSES: rename GPL-3 to GPL-3.0-only
  - LICENSES: rename Apache-2 to Apache-2.0
  - Move firmware licenses to a LICENSES/ directory
  - qcom: update ADSP firmware for sm8750 platform
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
  - qcom: Update DSP firmware for qcs8300 platform
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: Update DMCUB fw for DCN314
  - amdgpu: revert yellow carp VCN firmware
  - amdgpu: revert vangogh VCN firmware
  - amdgpu: revert sienna cichlid VCN firmware
  - amdgpu: revert navy flounder VCN firmware
  - amdgpu: revert dimgrey cavefish VCN firmware
  - amdgpu: revert beige_goby VCN firmware
  - qcom: update CDSP firmware for x1e80100 platform
  - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
  - linux-firmware: Add RCA firmware files for tas257x projects
  - intel_vpu: Update NPU firmware
  - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
  - QCA: Add BCS calibration binary for QCC2072
  - QCA: Update Bluetooth firmware for QCC2072 UART interface
  - amdgpu: DMCUB updates for various ASICs
  - rtl_nic: add firmware rtl8261c.bin for RTL8261c
  - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
  - i915: Xe3LPD DMC v2.36
  - i915: Xe3LPD_3002 DMC v2.31
  - i915: Xe3p_LPD DMC v2.37
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
  - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
  - qcom: Add gpu firmwares for Shikra chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - rtw89: 8852b: update fw to v0.29.29.18
  - rtw89: 8852bt: update fw to v0.29.122.2
  - amdgpu: Update gc 11.0.1 microcode
  - ASoC: tas2783: Add Firmware files for tas2783A projects
  - linux-firmware: add firmware for MT7927 WiFi device
  - Add HP ISH firmware for Intel Panther Lake systems
  - ti: Add PCM6240 firmware with multiple audio profiles support
  - qcom: add CDSP firmware for shikra platform
  - amdgpu: DMCUB updates for various ASICs
  - qcom: update ADSP firmware for x1e80100 platform
  - lt*_fw.bin: move to Lontium subdir
  - qcom: Add cdsp1r.jsn for sa8775p platform
  - amdgpu: rembrandt DMCUB v4.0.74.0
  Resolves: RHEL-154363


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.44-1
changelog:
  - storage: stop creating /etc/mtab symlink during installation (k.koukiou)
    Related: RHEL-135116
  - rescue: Add warning for immutable systems (k.koukiou)
    Related: RHEL-135116
  - rescue: detect OSTree deployments in rescue mode and show deployment path
    (k.koukiou)
    Resolves: RHEL-135116
  - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
    (k.koukiou)
    Related: RHEL-135116
  - network: List all network interfaces IP for RDP session (ppolawsk)
    Resolves: RHEL-74268


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.45-1
changelog:
  - Fix user input in driver disk menu is not displayed (adamkankovsky)
    Resolves: RHEL-58828
  - flatpak: tests: fix unreachable code (fsouza.bruno)
    Related: RHEL-143566
  - flatpak: Only override remote URLs when subscription module is available
    (bciconel)
    Related: RHEL-143566
  - flatpak: Make installation failures non-blocking (bciconel)
    Resolves: RHEL-143566
  - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
    Resolves: RHEL-144456


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.47-1
changelog:
  - chore: Support multiple console= kernel entries (ppolawsk)
    Resolves: RHEL-101789
  - Increase GUI startup timeout to 120 seconds (mkolman)
    Resolves: RHEL-173441
  - Refactor remaining X timeout references (mkolman)
    Resolves: RHEL-173441
  - Set RHSM machine name based on user provided hostname (mkolman)
    Resolves: RHEL-149198


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.50-1
changelog:
  - dracut: append anchor certs to CA bundle in initramfs (rvykydal)
    Resolves: RHEL-77154
  - security: add --type support for %certificate section (rvykydal)
    Resolves: RHEL-77154


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.51-1
changelog:
  - gui: disable overlay scrolling on disk selection lists (k.koukiou)
    Resolves: RHEL-69902
  - fix: use static string for tmux status line to reduce CPU usage (k.koukiou)
    Resolves: RHEL-180821
  - fix: improve error when enabling missing services on target (k.koukiou)
    Related: RHEL-61134
  - fix: check if service is installed before enabling in kickstart (k.koukiou)
    Resolves: RHEL-61134
  - storage: check disk space in cmdline mode before starting installation
    (rvykydal)
    Resolves: RHEL-142734


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.53-1
changelog:
  - Revert "fix: persist checkisomd5 media verification output in the journal"
    (k.koukiou)
    Related: RHEL-73812
  - fix: persist checkisomd5 media verification output in the journal (k.koukiou)
    Resolves: RHEL-73812
  - fix: allow enabling socket and other systemd units via kickstart (k.koukiou)
    Related: RHEL-61134


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.54-1
changelog:
  - modules: rpm_ostree: fix bootc install when /boot is on root partition
    (k.koukiou)
    Resolves: RHEL-147437
  - fix(bootc): show bootc error output in the installation error dialog
    (bciconel)
    Resolves: RHEL-162832
  - flatpak: honor %packages --ignoremissing (bciconel)
    Related: RHEL-101748
  - flatpak: surface errors when requested flatpaks cannot be installed
    (bciconel)
    Resolves: RHEL-101748


author: Nick Clifton <nickc@redhat.com> - 13.06-1
changelog:
  - Annocheck: Add more files to the gcc heuristics list.  (RHEL-150659)
  - Annocheck: Add .fc44 to list of known rpm file extensions.
  - Annocheck: Fix compile time warnings from GCC-15 re: strchr returning a const char *.
  - Annocheck: Skip production test for gcc libraries.  (RHEL-123175)


author: Nick Clifton <nickc@redhat.com> - 13.10-1
changelog:
  - Rebuild against LLVM 22.  (RHEL-140399)
  - Require C++17 for building.
  - Annocheck: Ignore Risc-V attribute sections.
  - Annocheck: Change result of failing not-XXX tests from FAIL to MAYB.  Update documentation.
  - Annocheck: Process the .ARM.attributes section.


author: Nick Clifton <nickc@redhat.com> - 13.12-1
changelog:
  - Annocheck: Skip the dynamic-tags test if a GNU Property note is present.  (RHEL-170885)
  - Annocheck: Look for compromising characters in pathnames.


author: Nick Clifton <nickc@redhat.com> - 13.15-1
changelog:
  - Annocheck: LTO test: Add exceptions for Clang runtime support object files.  (RHEL-176052)
  - Annocheck: Do not complain about GO binaries that do not support branch protection.
  - Annocheck: Do not complain about Rust binaries that do not support branch protection.


author: Nick Clifton <nickc@redhat.com> - 13.20-1
changelog:
  - Annocheck: Add support for ZIP files and TAR balls.
  - Testsuite: Fixes for the glibcxx and hardening tests.
  - GCC Plugin: Fix several minor bugs.
  - Annocheck: Fix several minor bugs.
  - Testsuite: Fix discrepancies.
  - GCC Plugin: Fix recording the setting of __GLIBCXX_ASSERTIONS.
  - Annocheck: Add exceptions for kernel bootstrap tools.  (RHEL-73522)
  - Testsuite: Add new tests.


author: Nick Clifton <nickc@redhat.com> - 13.22-1
changelog:
  - Annocheck: Enable stack-clash test for Risc-V binaries built by gcc-15+.
  - LLVM & Clang Plugins: Build with -fexceptions enabled.  (RHEL-184482)


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-68490
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68468
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69315


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-101355
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-101356


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-101355


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.4-1
changelog:
  - test: use post quantum crypto for certs where available (#368)
  - fix: Fix templates/configure_ag.j2 for Ansible 2.19
    Resolves: RHEL-106152


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-1
changelog:
  - Initialize the package
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-2
changelog:
  - Bump version to get automation to do builds and create an erratum
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.0-1
changelog:
  - Replace upstream value of leapp_system_roles_collection with downstream redhat.rhel_system_roles.
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-1
changelog:
  - Update to latest upstream version via commit hash
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.1-2
changelog:
  - Fix spec file to require rhel-system-roles package
  - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10


author: Sergei Petrosian <spetrosi@redhat.com> - 1.7.4-1
changelog:
  - Update to latest upstream version 1.7.4
  - Resolves: RHEL-153382 : Fix the role failing on steps that copy logs to the controller EL10


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.13-1
changelog:
  - ansible-core 2.16.13 release (RHEL-69036)
  - Add back ansible-test subpackage and drop doc subpackage
  - Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible
    Vault Files Due to Improper Logging) (RHEL-59076)
  - Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized
    content) (RHEL-69034)


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.14-1
changelog:
  - ansible-core 2.16.14 release (RHEL-69763)
  - Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in
    Ansible-Core) (RHEL-66996)


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67567
  - Fix requirements for ansible-core
    Resolves: RHEL-68648


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67567
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40228
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-70023
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68441
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70021
  - Collection: No more role module duplication
    Resolves: RHEL-71124


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67567
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-70023


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67567
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-70023


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67567
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78229


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104653
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92890
  - Provide compatibility for AAH naming
    Resolves: RHEL-89438
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-95104
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78635


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104653
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106560


author: Thomas Woerner <twoerner@redhat.com> - 1.16.0-1
changelog:
  - Update to version 1.16.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
    Resolves: RHEL-139147
  - Add suppport for passkey management
    Resolves: RHEL-139258
  - Add suppport for sysaccount management
    Resolves: RHEL-140600
  - ipadnsrecord: Allow to set any IP address if create_reverse is false
    Resolves: RHEL-140606


author: Jerry James <loganjerry@gmail.com> - 1.2-34
changelog:
  - Build with log4j support in non-bootstrap mode
  - Convert the License tag to SPDX
  - Update the project URL


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.7.5-1
changelog:
  - new version 1.7.5
  - Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared
    memory (CVE-2023-49582)


author: Joe Orton <jorton@redhat.com> - 1.6.3-18
changelog:
  - drop ENGINE support from apr_crypto (RHEL-33728)
  - fix (harmless) gcc snprintf warning in testbuckets.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1.6.3-19
changelog:
  - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
  - Related: RHEL-33728 - drop ENGINE support from apr_crypto


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.6.0-2
changelog:
  - rebase to 2.6.0 to fix the following CVEs:
    - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.1-1
changelog:
  - New upstream version 1.14.1
  - Use github tarballs again.
  - New binary augprint.
  - New bash-completions subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
    resolves: RHEL-76283
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.9
changelog:
  - Fix: fails to parse /etc/fstab when there is a double comma after character
    resolves: RHEL-77279
  - Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
    resolves: RHEL-113748
  - Synchronize spec file with Fedora


author: Pavel Březina <pbrezina@redhat.com> - 1.5.3-1
changelog:
  - authselect-1.5.3-1: rebase to upstream 1.5.3
  - Disable group merging by default, use with-group-merging to enable it
    (RHEL-94650)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:5.1.9-7
changelog:
  - RHEL-39412 - Remove autofs dependency on libnsl2
    - remove BuildRequires: libnsl2-devel.
  - Resolves: RHEL-39412


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-9
changelog:
  - RHEL-32639 - [10.0-beta] starting autofs leads to core dump
    - bring the existing patches up to date with upstream.
      - update the configure script.
      - the two existing patches were renamed upstream.
        autofs-configure-c99.patch => autofs-5.1.9-fix-ldap_parse_page_control-check.patch.
        autofs-c99.patch => autofs-5.1.9-Fix-incompatible-function-pointer-types-in-cyrus-sasl-module.patch
    - fix crash in make_options_string().
  - Resolves: RHEL-32639


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-10
changelog:
  - Upstream bug fix sync.
    - fix always recreate credential cache.
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
    - fix amd external mount error handling.
    - fix amd external mount mount handling.
    - don't free ext mount if mounted.
    - refactor amd function do_program_mount().
    - refactor umount_amd_ext_mount().
    - add flags argument to amd do_program_mount().
    - fix amd cache options not copied.
    - seperate amd mount and entry flags.
    - make iocl ops ->timeout() handle per-dentry expire.
    - refactor amd mount options handling.
    - add some unimplemented amd map options.


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-12
changelog:
  - RHEL-87525 - autofs hang - autofs-5.1.4-114.el8_10.2 [rhel-10]
    - fix submount shutdown race.
    - fix deadlock in master_notify_submount().
    - fix lock ordering deadlock in expire_cleanup().
  - Resolves: RHEL-87525


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-13
changelog:
  - RHEL-90571 - autofs: segfault while dereferencing null mapent [rhel-10]
    - fix handling of ignored offsets.
    - fix invalidated map entry handling in hosts module.
  - Resolves: RHEL-90571


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-14
changelog:
  - RHEL-150238 - RFE: autofs: add handling for AMD 'nounmount' option [rhel-10]
    - fix lookup search type in umount_subtree_mounts().
    - fix remount_active_mount() not remounting symlinks.
    - log when setting amd per-mount timeout.
    - update per-mount expire timeout on readmap.
    - clear per-mount timeout if not set.
    - fix incorrect flags update in update_with_defaults().
    - skip expire check for amd nounmount mounts.
  - Resolves: RHEL-150238


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-15
changelog:
  - RHEL-160620 - get_proximity returns a worng proximity on specific addresses
    [rhel-10]
    - Fix masks in parse_sub.c, so that hosts are correctly matched.
  - Resolves: RHEL-160620


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Jens Petersen <petersen@redhat.com> - 0.2-1
changelog:
  - add PROMPT_DIR_COLOR to change the dir color (Thomas Steenholdt, #2239152)
  - also check for bash default prompt for login shell (Sam Morris, #2248853)
  - add PROMPT_BRACKETS to surround the prompt with traditional brackets
    (based on feedback from Thomas Steenholdt, #2239152)


author: Jens Petersen <petersen@redhat.com> - 0.3-1
changelog:
  - add PROMPT_SEPARATOR and PROMPT_DIRECTORY default variables (#2239152)
  - add optional PROMPT_START and PROMPT_END (replaces PROMPT_BRACKETS)
  - add prompt_default(), prompt_traditional(), and prompt_default_os()
  - expand README.md


author: Jens Petersen <petersen@redhat.com> - 0.4-1
changelog:
  - define PROMPT_COLOR
  - add PROMPT_USERHOST default variable
  - add colorpre and colorsuf variables
  - drop PROMPT_ERROR
  - drop built-in container support for now
  - reset color after $ prompt
  - only define default functions if setting PS1


author: Jens Petersen <petersen@redhat.com> - 0.4.2-1
changelog:
  - test for BASH_VERSION to avoid running for other shells
    (#2279643, Nathan Grennan)
  - fix condition regression introduced in 0.4.1 linux console change
  - rename prompt_color_force variable to bash_prompt_color_force


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to the latest version (RHEL-78921)
  - Rebuild with LLVM 20 (RHEL-81772)
  - Silence warning of trace tools (RHEL-68952)
  - Fix bpf-runqlen (RHEL-91190)
  - Fix sslsniff and sofdsnoop (RHEL-58348)
  - Fix slabratetop (RHEL-58810)
  - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
  - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
  - Fix multiples ppc64 tools (RHEL-58147)


author: Jerome Marchand <jmarchan@redhat.com> - 0.36.1-1
changelog:
  - Rebase to version 0.36.1 (RHEL-162980)
  - Rebuild with LLVM 22 (RHEL-140402)
  - Fix multiple failure introduced by BPF 6.19 update (RHEL-174797)
  - Fix klockstat (RHEL-174798)
  - Fix bpf-cpufreq (RHEL-93855)      
  - Fix bpf-syncsnoop (RHEL-93854)
  - Fix tcpaccept (RHEL-93424)
  - Fix filegone, kvmexit, netqtop and tcpconnect on s390x (RHEL-75515)
  - Fix profile on s390x (RHEL-68950)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-12
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.13.0-3
changelog:
  - iSCSI: don't crash when LUN ID >= 256
    Resolves: RHEL-122305
  - Remove the safe_dbus module
    Related: RHEL-122305


author: Bastien Nocera <bnocera@redhat.com> - 5.86-1
changelog:
  - Update to 5.86
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Fix audio output not working in some circumstances
    Resolves: RHEL-147735


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-10
changelog:
  - Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print
  - Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19
    Among others fixes ipmievd startup (fedora#2303185)


author: Colin Walters <walters@verbum.org> - 1.13.0-1
changelog:
  - Release 1.13.0
  - Update to bootc 1.13.0
  - Pass CARGO_FEATURES explicitly to make install to prevent auto-detection
    rebuild in install environment (workaround for upstream Makefile issue)
  - Package shell completions (bash, zsh, fish)


author: Viktor Malik <vmalik@redhat.com> - 0.21.1-1
changelog:
  - Rebased to version 0.21.1
  - Resolves: RHEL-36076
  - Rebuilt for LLVM 18
  - Resolves: RHEL-27729
  - Enable gating
  - Resolves: RHEL-45249


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Arjun Shankar <arjun@redhat.com> - 2.0.20230521-2
changelog:
  - Analyse byacc sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222081)


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101.1
changelog:
  - Temporarily generate the directory-hash files in %install ...(next item)
  - Add list of ghost files from directory-hash to %files


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101.2
changelog:
  - update-ca-trust: copy directory-hash symlinks to /etc/pki/tls/certs
  - Remove /etc/pki/tls/cert.pem symlink so that it isn't loaded by default


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-102.5
changelog:
  - Bring back openssl trusted format bundle as well (Resolves: RHEL-109484)
  - Restored the following symlinks:
  	* /etc/pki/tls/cert.pem
  	* /etc/pki/tls/certs/ca-certificates.crt
  	* /etc/pki/tls/certs/ca-bundle.trust.crt
  	* /etc/pki/tls/certs/ca-bundle.crt
  	* /etc/ssl/cert.pem
  	* /etc/ssl/certs/ca-certificates.crt
  	* /etc/ssl/certs/ca-bundle.trust.crt
  	* /etc/ssl/certs/ca-bundle.crt
  - add libffi


author: rhel-developer-toolbox <krenzelok.frantisek@gmail.com> - 2025.2.80_v9.0.305-101
changelog:
  - Update to CKBI 2.80_v9.0.305 from NSS 3.114
  -    Adding:
  -     # Certificate "TWCA CYBER Root CA"
  -     # Certificate "TWCA Global Root CA G2"
  -     # Certificate "SecureSign Root CA12"
  -     # Certificate "SecureSign Root CA14"
  -     # Certificate "SecureSign Root CA15"
  -     # Certificate "D-TRUST BR Root CA 2 2023"
  -     # Certificate "TrustAsia SMIME ECC Root CA"
  -     # Certificate "TrustAsia SMIME RSA Root CA"
  -     # Certificate "TrustAsia TLS ECC Root CA"
  -     # Certificate "TrustAsia TLS RSA Root CA"
  -     # Certificate "D-TRUST EV Root CA 2 2023"
  -     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
  -     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"
  -     # Certificate "Sectigo Public Code Signing Root R46"
  -     # Certificate "Sectigo Public Code Signing Root E46"


author: Jon Maloy <jmaloy@redhat.com> - 5.0.1-7
changelog:
  - Fix CVE-2025-67873 (heap buffer overflow)
    Resolves: RHEL-141553
  - Fix CVE-2025-68114 (memory corruption)
    Resolves: RHEL-137749


author: Jindrich Novy <jnovy@redhat.com> - 5:0.2.1-2
changelog:
  - use -static-pie on x86_64/aarch64, fall back to -static on ppc64le/s390x
    where rcrt1.o is not available
  - pass CFLAGS on make command line to override autotools Makefile variables
  - Resolves: RHEL-152096


author: Andreas Schneider <asn@redhat.com> - 0.3.12-1
changelog:
  - Update to version 0.3.12
  - resolves: RHEL-121729
  - Added channel binding support
  - resolves: RHEL-103400


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61876)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65843)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-2
changelog:
  - improve description of refresh directive (RHEL-91788)
  - improve logging of selection failures (RHEL-91787 RHEL-91789 RHEL-91791)
  - fix sourcedir reloading to not multiply sources (RHEL-95017)


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-20
changelog:
  - ci-Remove-python3-jsonschema-dependency.patch [RHEL-65849]
  - Resolves: RHEL-65849
    ([RHEL-10] Drop cloud-init dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-21
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65769]
  - Resolves: RHEL-65769
    ([RHEL-10] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-1
changelog:
  - Rebase to 24.4 [RHEL-66254]
  - Resolves: RHEL-66254
    ([RHEL-10] Rebase cloud-init to 24.4 version)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - Fix config missed on rebase [RHEL-77206]
  - Resolves: RHEL-77206
    (cloud-init has reacquired a dependency on python-jsonschema)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-73667]
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-79727]
  - Resolves: RHEL-73667
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [rhel-10])
  - Resolves: RHEL-79727
    ([c10s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-4
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81896]
  - Resolves: RHEL-81896
    (DataSourceNoCloudNet network configuration is ineffective [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-5
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88659]
  - Resolves: RHEL-88659
    (cloudinit backport optimization features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-6
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100617]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100617]
  - Resolves: RHEL-100617
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128097]
  - Resolves: RHEL-128097
    ([rhel-10] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7.el10_2.1
changelog:
  - ci-fix-Pass-interface-string-to-get_newest_lease-6648.patch [RHEL-159033]
  - ci-fix-cloudstack-Improve-domain-name-DHCP-lease-lookup.patch [RHEL-159033]
  - ci-downstream-fix-test_cloudstack.py-since-pytest-fixtu.patch [RHEL-159033]
  - Resolves: RHEL-159033
    ([GSS][Secure Support] [RHEL-10] cloud-init requests lease before DHCP can provide one [rhel-10.2.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.33-9
changelog:
  - cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
  - Resolves: RHEL-36095
    (Remove cloud-utils-growpart dependency on obsolete gdisk)


author: Packit <hello@packit.dev> - 358-1
changelog:
  - Networking: Add Wi-Fi support
  - Cockpit Client updated to GTK 4
  - Bugfixes and translation updates


author: Packit <hello@packit.dev> - 360-1
changelog:
  - ws: be more explicit when handling hostnames on cli [CVE-2026-4631]
  - ws: support loading a custom login page
  - Translation updates


author: Packit <hello@packit.dev> - 360.1-1
changelog:
  - Prevent overmounting also for btrfs subvolumes (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)
  - Remove "Mount" action in Anaconda mode (https://bugzilla.redhat.com/show_bug.cgi?id=2455855)


author: Packit <hello@packit.dev> - 362-1
changelog:
  - Bug fixes and translation updates
  - Fix arbitrary code execution via specially crafted logs page link (CVE-2026-4802)


author: Packit <hello@packit.dev> - 15-1
changelog:
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-1
changelog:
  - composefs-1.0.5-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.0.6-1
changelog:
  - update to the latest upstream release
    https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
    RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 1.0.7-1
changelog:
  - composefs-1.0.7-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.7
  - Related: RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-1
changelog:
  - update to https://github.com/containers/conmon/releases/tag/v2.2.1
  - enable RELRO
  - Related: RHEL-122178


author: Jindrich Novy <jnovy@redhat.com> - 2:2.2.1-3
changelog:
  - pass %{optflags} and %{build_ldflags} to enable stack protector
    and FORTIFY_SOURCE hardening flags
  - Resolves: RHEL-152224


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-111947


author: Jindrich Novy <jnovy@redhat.com> - 4:2.242.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
  - Related: RHEL-111917


author: Jindrich Novy <jnovy@redhat.com> - 4:2.244.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0
  - Resolves: RHEL-111947


author: Jindrich Novy <jnovy@redhat.com> - 4:2.245.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0
  - Related: RHEL-122178


author: Jindrich Novy <jnovy@redhat.com> - 4:2.246.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.246.0
  - Resolves: RHEL-143694


author: Jindrich Novy <jnovy@redhat.com> - 4:2.247.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.247.0
  - Resolves: RHEL-135340


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 5:0.64.0-5
changelog:
  - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images
  - Related: RHEL-111917


author: Jindrich Novy <jnovy@redhat.com> - 6:6.0-1
changelog:
  - bump to container_libs_branch podman-6.0
  - use RHEL-specific mounts.conf from common/contrib/redhat/ (container-libs#842)
  - move config files from /etc/containers to /usr/share/containers (vendor defaults)
  - add vendor drop-in configs for containers.conf, storage.conf and registries.conf
  - add %posttrans scriptlet to preserve user config on upgrade
  - add Conflicts: podman < 5:6, buildah < 2:1.44, skopeo < 1:1.23
  - own /etc/containers/networks directory
  - Resolves: RHEL-189270


author: Jindrich Novy <jnovy@redhat.com> - 6:6.0-2
changelog:
  - fix broken rootless storage.conf mount option (metacopy=on conflicts with
    userxattr) - split storage vendor config into separate rootful and rootless
    drop-in files - Resolves: RHEL-191669


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.5-10
changelog:
  - CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180650)
  - unexpand: fix stack overflow with large tabsizes (RHEL-152110)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-2
changelog:
  - Resolves: RHEL-163803
  - Resolves: RHEL-163824

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: Joseph Myers <josmyers@redhat.com> - 14.4.1-1
changelog:
  - update from releases/gcc-14 branch (RHEL-174638)
    - GCC 14.4 release
    - PRs ada/107475, ada/123060, ada/123138, ada/123289, ada/123867,
  	ada/124226, ada/124285, ada/124607, ada/124836, ada/125044,
  	ada/125695, c/101312, c/105555, c/123018, c/123156, c/123365,
  	c/123882, c/124830, c++/65271, c++/91388, c++/97740, c++/98930,
  	c++/101670, c++/120224, c++/120685, c++/120876, c++/121445,
  	c++/121822, c++/122070, c++/122318, c++/122494, c++/122550,
  	c++/122658, c++/122772, c++/122834, c++/123346, c++/123529,
  	c++/123578, c++/123597, c++/123667, c++/123676, c++/123684,
  	c++/123814, c++/123818, c++/123845, c++/123889, c++/124489,
  	c++/124632, c++/124850, c++/125315, c++/125376, d/119799, d/120096,
  	d/121477, d/123046, d/123264, d/123349, d/123407, d/123419, d/123422,
  	d/123798, d/124026, d/125089, debug/121964, debug/123886,
  	fortran/79524, fortran/82721, fortran/84245, fortran/85352,
  	fortran/93715, fortran/93814, fortran/93832, fortran/94978,
  	fortran/95338, fortran/95879, fortran/96087, fortran/96986,
  	fortran/98203, fortran/100155, fortran/100194, fortran/102430,
  	fortran/102459, fortran/102596, fortran/102619, fortran/105168,
  	fortran/106546, fortran/106946, fortran/107425, fortran/107968,
  	fortran/109788, fortran/115260, fortran/116829, fortran/119273,
  	fortran/120286, fortran/120723, fortran/121616, fortran/122046,
  	fortran/122206, fortran/124161, fortran/124450, fortran/124482,
  	fortran/124751, ipa/106260, ipa/111036, ipa/114790, ipa/116296,
  	ipa/122856, ipa/123416, ipa/125699, libstdc++/90192, libstdc++/102259,
  	libstdc++/105580, libstdc++/105857, libstdc++/109965,
  	libstdc++/114153, libstdc++/114865, libstdc++/118088,
  	libstdc++/118681, libstdc++/120029, libstdc++/120293,
  	libstdc++/120390, libstdc++/120789, libstdc++/121771,
  	libstdc++/122062, libstdc++/122567, libstdc++/122661,
  	libstdc++/122726, libstdc++/122821, libstdc++/122842,
  	libstdc++/123100, libstdc++/123147, libstdc++/123875,
  	libstdc++/123991, libstdc++/124024, libstdc++/124124,
  	libstdc++/124363, libstdc++/124568, libstdc++/125369, lto/121588,
  	lto/122515, lto/122620, middle-end/111817, middle-end/116772,
  	middle-end/120052, middle-end/120564, middle-end/121581,
  	middle-end/122624, middle-end/122689, middle-end/123175,
  	middle-end/123386, middle-end/123573, middle-end/123575,
  	middle-end/123703, middle-end/123775, middle-end/123876,
  	middle-end/123887, middle-end/123978, middle-end/124056,
  	middle-end/124250, middle-end/124491, middle-end/125146,
  	middle-end/125621, pch/14940, preprocessor/105412,
  	preprocessor/123273, rtl-optimization/106859, rtl-optimization/116053,
  	rtl-optimization/116600, rtl-optimization/120182,
  	rtl-optimization/121773, rtl-optimization/122215,
  	rtl-optimization/123121, rtl-optimization/123294,
  	rtl-optimization/124454, target/99930, target/105192, target/112400,
  	target/117575, target/117771, target/119079, target/119130,
  	target/120250, target/120645, target/122000, target/122097,
  	target/122223, target/122323, target/122446, target/122516,
  	target/122527, target/122695, target/122867, target/123102,
  	target/123155, target/123217, target/123271, target/123285,
  	target/123457, target/123460, target/123484, target/123521,
  	target/123548, target/123607, target/123624, target/123742,
  	target/123766, target/123779, target/123807, target/124126,
  	target/124133, target/124138, target/124236, target/124315,
  	target/124316, target/124335, target/124365, target/124366,
  	target/124705, target/124712, target/124933, target/125049,
  	target/125351, target/125409, target/125611, target/125670,
  	target/125751, target/125752, target/125795, target/125992,
  	testsuite/123004, testsuite/123353, testsuite/124682,
  	tree-optimization/107997, tree-optimization/109410,
  	tree-optimization/110043, tree-optimization/117217,
  	tree-optimization/119532, tree-optimization/119568,
  	tree-optimization/120341, tree-optimization/120560,
  	tree-optimization/120987, tree-optimization/121104,
  	tree-optimization/121776, tree-optimization/121844,
  	tree-optimization/122126, tree-optimization/122394,
  	tree-optimization/122408, tree-optimization/122793,
  	tree-optimization/122943, tree-optimization/122976,
  	tree-optimization/123061, tree-optimization/123300,
  	tree-optimization/123351, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123537,
  	tree-optimization/123596, tree-optimization/123602,
  	tree-optimization/123636, tree-optimization/123645,
  	tree-optimization/123729, tree-optimization/123736,
  	tree-optimization/123741, tree-optimization/123864,
  	tree-optimization/124130, tree-optimization/124132,
  	tree-optimization/124135, tree-optimization/124151,
  	tree-optimization/124288, tree-optimization/124358,
  	tree-optimization/124555, tree-optimization/124627,
  	tree-optimization/124677, tree-optimization/124826,
  	tree-optimization/124868, tree-optimization/125019,
  	tree-optimization/125025, tree-optimization/125039,
  	tree-optimization/125079, tree-optimization/125431,
  	tree-optimization/125501, tree-optimization/125774


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: Veronika Hanulikova <vhanulik@redhat.com> - 2.9.11-7
changelog:
  - Add missing man page for create-cracklib-dict (RHEL-39972)
  - Preserve special characters in cracklib-format (RHEL-39972)


author: Tao Liu <ltao@redhat.com> - 1.6.4-6
changelog:
  - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
  - add gating.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Christopher Lusk <clusk@redhat.com> - 4.2-4
changelog:
  - Fix full RELRO: patch nmk build.mk to preserve -Wl flags for gcc-linked targets
  - Resolves: RHEL-152222


author: Adrian Reber <areber@redhat.com> - 4.2-6
changelog:
  - Apply patch to fix RHEL-189245 RHEL-189246 RHEL-189248
  - Resolves: RHEL-189245
  - Resolves: RHEL-189246
  - Resolves: RHEL-189248


author: Jindrich Novy <jnovy@redhat.com> - 1.26-2
changelog:
  - use %configure macro instead of ./configure to inject RPM hardening flags
    (stack protector, FORTIFY_SOURCE)
  - Resolves: RHEL-152226


author: Jindrich Novy <jnovy@redhat.com> - 1.27-1
changelog:
  - update to https://github.com/containers/crun/releases/tag/1.27
  - add conditional Requires on container-selinux for SELinux-enabled systems
  - Resolves: RHEL-164639
  - Resolves: RHEL-169517


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250602-1.gita6d4d0c
changelog:
  - openssl: fix mistakes in integrity-only cipher definitions
  - FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  - AD-SUPPORT-LEGACY: resurrect subpolicy as present in RHEL-9


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250714-1.git95bf40e
changelog:
  -  sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  -  sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  -  sequoia: Add PQC algorithm
  -  sequoia: Do not include EdDSA in FIPS policy
  -  sequoia: Generate AEAD policy
  -  openssl: send one PQ and one classic key_share; prioritize PQ groups
  -  FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  -  python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  -  gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250905-1.gitc7eb7b2
changelog:
  - rpm-sequoia: enable MLDSA65-ED25519 and MLDSA87-ED448 in all policies
  - rpm-sequoia: force enable all PQ algorithms for now


author: Alexander Sosedkin <asosedkin@redhat.com> - 20251126-1.git918f03d
changelog:
  - openssl: let TLS 1.3 brainpool groups get used for key shares
  - openssh: support mlkem768nistp256-sha256 and mlkem1024nistp384-sha384
  - FUTURE: disable non-PQ groups, keep ML-KEM only
  - sequoia: register "eddsa" as an alias to EDDSA-ED25519


author: Alexander Sosedkin <asosedkin@redhat.com> - 20260216-1.git0e54016
changelog:
  - FIPS: allow NIST hybrid kexes for openssh
  - libssh: enable NIST ML-KEM hybrids
  - libssh: add mlkem768x25519-sha256


author: Alexander Sosedkin <asosedkin@redhat.com> - 20260525-1.gitf5f5370
changelog:
  - rpm-sequoia: revert force-enabling PQ algorithms
  - NO-SHA1: revive this subpolicy
  - openssl: prefix every group and sigalg with a ?
  - packaging: drop obsolete grubby dependency


author: Alexander Sosedkin <asosedkin@redhat.com> - 20260708-1.git988eb15
changelog:
  - NO-SHA1: drop this subpolicy since it's not doing much
  - NO-HMAC-SHA1: introduce a new subpolicy
  - java: fix MD5withECDSA concatenating with RIPEMD160withRSA


author: Ondrej Kozina <okozina@redhat.com> - 2.7.5-1
changelog:
  - Update to cryptsetup 2.7.5
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - Resolves: RHEL-57036 RHEL-57037 RHEL-61581


author: Kristina Hanicova <khanicov@redhat.com> - 2.8.1-2
changelog:
  - patch: opal: Submit PSID reset command to R/W file descriptor.
  - patch: Read integrity profile info from top level device.
  - patch: Fix possible use of uninitialized variable.
  - patch: Reinstate pbkdf serialization flag in device activation.
  - patch: Fix LUKS2 device status in inline HW mode and detached header.
  - patch: Set inline integrity flag if no underlying dm-integrity device.
  - patch: Fix wrong device size status reports in cryptsetup and integritysetup.
  - Resolves: RHEL-122285 RHEL-125150 RHEL-125155 RHEL-125166 RHEL-132584 RHEL-140107


author: Kristina Hanicova <khanicov@redhat.com> - 2.8.6-1
changelog:
  - Update to cryptsetup 2.8.6.
  - patch: ci: Replace jq with bash wrapper.
  - patch: ci: Fix jq no longer handling 0x00 characters.
  - patch: reencrypt: update internal reencryption error state descriptions.
  - patch: reencrypt: merge REENC_ERR and REENC_ROLLBACK errors in one.
  - patch: reencrypt: better name error values to match the description.
  - patch: reencrypt: refactor overlay devices teardown.
  - patch: reencrypt: add more gracefull reencryption error path.
  - patch: tests: Add reencryption error path tests.
  - Resolves: 163434


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65464)
  - Fix signal handling at exit
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
  - Minor edits in the rpm scripts
  - Make xemacs a bcond


author: Vladislav Dronov <vdronov@redhat.com> - 15.9-31
changelog:
  - Add two latest distribution patches (RHEL-158207)
  - Correct the erroneous brace count caused by the unbalanced { }
  - Make it possible to add the new keywords


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-12
changelog:
  - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-13
changelog:
  - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-15
changelog:
  - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-7
changelog:
  - CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
  - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Jeff Moyer <jmoyer@redhat.com> - 80-4
changelog:
  - Fix listing of region capabilities (Jeff Moyer)
  - Remove orphaned patch file (Jeff Moyer)
  - Resolves: RHEL-80436


author: Martin Osvald <mosvald@redhat.com> - 3.8.3-1
changelog:
  - Fix CVE-2024-34055
  - Fix wrong symlinks to imtest utilities
  - Convert to %autorelease and %autochangelog


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Mark Wielaard <mjw@redhat.com> - 5.3-2
changelog:
  - New upstream 5.3 release
  - Drop release gpg key, unsupported by gpgverify.
  - Drop all local patches
  - Add debugedit-5.3-elflint-test.patch
  - Add gcc-c++ as BuildRequires
  - Add gdb as BuildRequires
  - Install debugedit-classify-ar and man page


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)
  - drop sil-mingzat-fonts recommends from fonts-en
  - use Hebrew fonts for Yiddish (#2284093)


author: Akira TAGOH <tagoh@redhat.com> - 4.1-2
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Filip Suba <fsuba@redhat.com> - 0.9.9-11
changelog:
  - Add 0033-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
    * Fixes RHEL-103112 ("Update multipath builtin config to add new
      device defaults [rhel-10]")
  - Resolves: RHEL-103112


author: Lin Li <lilin@redhat.com> - 0.9.9-12
changelog:
  Add 0034-libmultipath-fix-crash-in-print_foreign_topology.patch
    * Fixes RHEL-107436 ("Running multipath -ll on system with "enable_foreign
      nvme" results in segfault")
  Resolves: RHEL-107436


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-13
changelog:
  - Add 0035-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
  - Add 0036-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
  - Add 0037-libmpathpersist-check-released-key-against-the-reser.patch
  - Add 0038-multipathd-remove-thread-from-mpath_pr_event_handle.patch
  - Add 0039-libmpathpersist-remove-uneeded-wrapper-function.patch
  - Add 0040-libmpathpersist-reduce-log-level-for-persistent-rese.patch
  - Add 0041-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
  - Add 0042-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
  - Add 0043-libmpathpersist-limit-changing-prflag-in-update_map_.patch
  - Add 0044-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
  - Add 0045-libmpathpersist-remove-useless-function-send_prout_a.patch
  - Add 0046-libmpathpersist-redesign-failed-release-workaround.patch
  - Add 0047-libmpathpersist-fail-the-release-if-all-threads-fail.patch
  - Add 0048-libmpathpersist-Handle-changing-key-corner-case.patch
  - Add 0049-libmpathpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
  - Add 0050-libmultipath-rename-prflag_value-enums.patch
  - Add 0051-libmpathpersist-use-a-switch-statement-for-prout-com.patch
  - Add 0052-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
  - Add 0053-libmpathpersist-remove-update_map_pr-code-for-NULL-p.patch
  - Add 0054-libmpathpersist-move-update_map_pr-to-multipathd.patch
  - Add 0055-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
  - Add 0056-libmpathpersist-clean-up-duplicate-function-declarat.patch
  - Add 0057-multipathd-wrap-setting-and-unsetting-prflag.patch
  - Add 0058-multipathd-unregister-PR-key-when-path-is-restored-i.patch
  - Add 0059-libmpathpersist-Fix-up-reservation_key-checking.patch
  - Add 0060-libmpathpersist-change-how-reservation-conflicts-are.patch
  - Add 0061-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
  - Add 0062-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
  - Add 0063-libmpathpersist-Restore-old-reservation-key-on-failu.patch
  - Add 0064-libmpathpersist-update-reservation-key-before-checki.patch
  - Add 0065-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
  - Add 0066-libmpathpersist-Don-t-always-fail-registrations-for-.patch
  - Add 0067-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
  - Add 0068-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
  - Add 0069-libmpathpersist-reregister-keys-when-self-preempting.patch
  - Add 0070-libmpathpersist-handle-updating-key-race-condition.patch
  - Add 0071-libmpathpersist-handle-preempting-all-registrants-re.patch
  - Add 0072-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
  - Add 0073-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
  - Add 0074-libmpathpersist-use-check_holding_reservation-in-mpa.patch
  - Add 0075-libmpathpersist-Fix-unregistering-while-holding-the-.patch
  - Add 0076-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
  - Add 0077-multipathd-Fix-tracking-of-old-PR-key.patch
    * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
      reservation handling [rhel-10]")
  - Resolves: RHEL-118720


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-14
changelog:
  - Add 0078-multipathd-Fix-race-while-registering-PR-key.patch
  - Add 0079-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
    * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
      reservation handling [rhel-10]")
  - Resolves: RHEL-118720


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-15
changelog:
  - Add 0080-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
    * Fixes RHEL-128338 ("Update the multipath.conf stanza for Infinidat
      storage")
  - Resolves: RHEL-128338


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-16
changelog:
  - Add 0081-multipathd-make-multipathd-show-status-busy-checker-.patch
    * Fixes RHEL-136405 ("improve Busy checking for multipathd show status
      output")
  - Add 0082-multipathd-print-path-offline-message-even-without-a.patch
    * Fixes RHEL-133815 ("log_checker_err is not printing messages
      repeatedly for failed path [rhel-10]")
  - Resolves: RHEL-133815
  - Resolves: RHEL-136405


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-17
changelog:
  - Add 0083-libmultipath-add-purge_disconnected-configuration-op.patch
  - Add 0084-multipathd-implement-purge-functionality-for-disconn.patch
    * Fixes RHEL-141287 ("Add purge_disconnected support to multipathd")
  - Resolves: RHEL-141287


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-18
changelog:
  - Add 0085-libmpathpersist-fix-register-retry-status-checking.patch
  - Add 0086-multipathd-remember-number-of-registered-keys-when-i.patch
  - Add 0087-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
    * Fixes RHEL-129442 ("Improve multipathd's handling of updating
      persistent reservations on restored paths.")
  - Resolves: RHEL-129442


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-19
changelog:
  - Add 0088-libmultipath-set-offline-whenever-path-is-not-online.patch
    * Fixes RHEL-151447 ("multipathd doesn't print checker messages for
      some offline path states")
  - Resolves: RHEL-151447


author: Than Ngo <than@redhat.com> - 3.10-1
changelog:
  - Fix bz#2208831, update to 3.10
  - Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9


author: Ales Matej <amatej@redhat.com> - 4.20.0-21
changelog:
  - autoremove: when a dangling protected dependency is found produce a warning
    and skip it (RHEL-128445)


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Tomas Korbar <tkorbar@redhat.com> - 1.7.3-2
changelog:
  - Rebuild because of infrastructure problems
  - Resolves: RHEL-92412
  - Resolves: RHEL-88534
  - Resolves: RHEL-81709


author: Petr Menšík <pemensik@redhat.com> - 2.90-7
changelog:
  - Prevent overflow in extract_name function (CVE-2026-2291)
  - Prevent DoS in DNSSEC validation (CVE-2026-4890)
  - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
  - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
  - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)
  - Prevent out-of-bounds read in extract_addresses (CVE-2026-5172)


author: Ondrej Sloup <osloup@redhat.com> - 1.0-83
changelog:
  - Use %patch -P N instead of deprecated %patchN
  - Use RPM macros in the spec file for paths
  - Add comments, improve the structure
  - Unify paths in patch files
  - Simplify install script


author: Ales Nezbeda <anezbeda@redhat.com> - 1.79.2-22
changelog:
  - Add missing SPDX licenses to license tag
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1975708712
  - Related: RHEL-37894


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.6.0-1
changelog:
  - Rebase to PKI 11.6.0
  - Resolves: RHEL-70108
  - Resolves: RHEL-75585
  - Resolves: RHEL-75546
  - Resolves: RHEL-74371
  - Resolves: RHEL-63015


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-17
changelog:
  - fix building with latest openssl (RHEL-117460)
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-18
changelog:
  - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
  - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
  - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)


author: Pavel Valena <pvalena@redhat.com> - 107-2
changelog:
  - fix: improve hostonly sloppy mode
  - fix(dracut.sh): don't pass empty string as dir
  - feat(systemd): drop unnecessary dependency on libgcrypt
  - fix(kernel-modules-extra): remove stray  before /
  - Revert "fix(base): do not require chroot inside initramfs"
  - fix: let check_vol_slaves_all return 1 when checks on all slaves fail
  - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
  - fix(74nvmf): set root=nvmf
    Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897


author: Pavel Valena <pvalena@redhat.com> - 107-3
changelog:
  - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
  - test: fixup NFS test.sh
    Resolves: RHEL-108215,RHEL-97473


author: Pavel Valena <pvalena@redhat.com> - 107-4
changelog:
  - fix(systemd-udevd): handle root=gpt-auto for systemd-v258
  - fix(systemd-repart): allow partition format
  - feat(install.d): do not remove UKIs on remove)
  - fix(dracut.install): remove extraneous quotes in dracut arguments
  - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
    Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571


author: Pavel Valena <pvalena@redhat.com> - 107-7
changelog:
  - fix(base): escape arguments in initqueue hook script generation
  - fix(net-lib): warn on suspicious shell metacharacters in hostname file
  - fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  - fix(network-legacy): remove network-legacy completely from the codebase
  - fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
    Resolves: RHEL-170845


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-45148
  - Add gating.yaml
  - Add "Provides: pahole"
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
    have expected alignment due to some attribute usage that then causes
    problems with BTF trampolines due to lack of expressiveness in BTF to
    signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
    encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
    like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
    explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
    nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
    and current branch, i.e. 'next'.


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-1
changelog:
  - Rebase to edk2-stable202508 [RHEL-111718]
  - Resolves: RHEL-111718
    ([edk2,rhel-10] rebase to edk2-stable202508)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-2
changelog:
  - edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
  - Resolves: RHEL-109548
    ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-3
changelog:
  - edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
  - Resolves: RHEL-115880
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-4
changelog:
  - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
  - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
  - Resolves: RHEL-126085
    ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-5
changelog:
  - edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
  - Resolves: RHEL-150696
    (edk2: Add JSON descriptors for uefi-vars builds)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-1
changelog:
  - Rebase to edk2-stable202602 [RHEL-151719]
  - Resolves: RHEL-151719
    ([edk2,rhel-10] rebase to edk2-stable202602)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-2
changelog:
  - edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161575]
  - Resolves: RHEL-161575
    (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-3
changelog:
  - edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182419]
  - edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165726]
  - Resolves: RHEL-182419
    (edk2/x64: re-enable legacy kernel loader)
  - Resolves: RHEL-165726
    (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-10.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-4
changelog:
  - edk2-Revert-MdeModulePkg-PciBusDxe-Degrade-MEM64-to-PMEM6.patch [RHEL-188305]
  - Resolves: RHEL-188305
    ([edk2,rhel-10] Unable to allocate PCI BAR with edk2-20260221-1.el10)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20260221-5
changelog:
  - edk2-update-dbx-to-20260630-v1.6.5.patch [RHEL-193127]
  - Resolves: RHEL-193127
    ([edk2] update dbx database to release 1.6.5)


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: Aaron Merey <amerey@redhat.com> - 0.195-1
changelog:
  - Upgrade to upstream elfutils 0.195
  - Drop upstreamed patches
    elfutils-0.194-zero-sh_addr.patch
    elfutils-0.194-alloc-jobs.patch


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.6.1-1
changelog:
  - rebase to 5.6.1 (RHEL-132336)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide.  Thanks a lot!


author: Abhi Das <adas@redhat.com> - 1.8.2-2
changelog:
  - Rebase to 1.8.2-2 for zstd and multithreading support and
    Remove erroneously added gating.yaml
    Resolves: RHEL-68370


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-2
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.5-2
changelog:
  - fagenrules: Validate new compiled rules
  - Add fapolicyd-cli --check-rules option
  - Bump maximum length of a configuration file line


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-24
changelog:
  - bundled pyasn1: replace with dependency to fix CVE-2026-30922
  - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
    Resolves: RHEL-157188, RHEL-155669


author: Arslan Ahmad <arahmad@redhat.com> - 4.16.0-29
changelog:
  - fence_openstack: fix list-action to avoid timeout when
    there are 100+ VMs on the hypervisor
    Resolves: RHEL-155007


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Miguel Martín <mmartinv@redhat.com> - 0.5.3-1
changelog:
  * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
   * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
   * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
   * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
   * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
   * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
  - Resolves: RHEL-77724


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Jan Grulich <jgrulich@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0
    Resolves: RHEL-126038
    Resolves: RHEL-92123
    Resolves: RHEL-165631
    Resolves: RHEL-170158


author: Jan Grulich <jgrulich@redhat.com> - 1.4.7-1
changelog:
  - Update to 1.4.7
    Resolves: RHEL-126427
  - Make flatpak-builder to use fusermount3
    Resolves: RHEL-72576
  - Disable %check


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Zdenek Dohnal <zdohnal@redhat.com> - 4.0-77.20230810
changelog:
  - update to foomatic-db-4.0-20230810
  - fix xargs in %prep to work with files with spaces
  - fix rpm warnings about patch macros
  - SPDX migration


author: Antonio Torres <antorres@redhat.com> - 3.2.8-2
changelog:
  - Disable JIT if PCRE can't allocate executable memory
  - Fix warnings from service file
    Resolves: RHEL-116594


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-8
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
    Resolves: RHEL-142334, RHEL-142318


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-9
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-11
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
    Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
    Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 15.0-7
changelog:
  - Man page and documentation updates (RHEL-95996)
  - Support scl-style quoted invocation (RHEL-94760)


author: Nick Clifton <nickc@redhat.com> - 2.44-4
changelog:
  - Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
  - Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.1.1-2.2
changelog:
  - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
  - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
    (RHEL-84680)


author: Marek Polacek <polacek@redhat.com> 15.1.1-2.3
changelog:
  - ship libstdc++.modules.json (RHEL-97043)
  - configure with --with-long-double-format=ieee (RHEL-97055)


author: Siddhesh Poyarekar <siddhesh@redhat.com> 15.2.1-7
changelog:
  - update from releases/gcc-15 branch (RHEL-116507)
    - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
  	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
  	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
  	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
  	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
  	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
  	diagnostics/120063, fortran/107406, libfortran/122936,
  	libstdc++/120446, libstdc++/122812, libstdc++/122907,
  	libstdc++/123147, middle-end/111817, middle-end/123107,
  	middle-end/123392, middle-end/123703, rtl-optimization/121773,
  	rtl-optimization/122215, rtl-optimization/123121,
  	rtl-optimization/123523, target/117575, target/119130,
  	target/120250, target/121192, target/121485, target/123022,
  	target/123092, target/123155, target/123217, target/123460,
  	target/123484, target/123489, target/123521, target/123607,
  	target/123742, testsuite/123353, tree-optimization/122793,
  	tree-optimization/122868, tree-optimization/123040,
  	tree-optimization/123300, tree-optimization/123351,
  	tree-optimization/123372, tree-optimization/123431,
  	tree-optimization/123513, tree-optimization/123602,
  	tree-optimization/123736, tree-optimization/123741


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
    supported target, so lets drop this target.  Retain for older RHEL
    versions, as well as Fedora.


author: Keith Seitz <keiths@redhat.com> - 16.3-3.el10
changelog:
  - Include gdb-index-generation-fixes.patch (renamed).
    (Tom Tromey and Andrew Burgess, RHEL-150992)


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15
changelog:
  - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
  - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.45.2-1
changelog:
  - update to 2.45.2
  - add glibc-utils BuildRequires
  - build docs with asciidoc instead of a asciidoctor
  - drop git-p4 subpackage
  - Resolves: RHEL-45572, RHEL-45215


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.1-12
changelog:
  - Release bump due to internal issue with the build system (missing debug symbols)
    Related: RHEL-24118


author: Dhanuka Warusadura <dhanuka@gnome.org> - 42.1-6
changelog:
  - ssh-agent: update build instructions to disable ssh component
  - Introduced conditional builds based on ssh component required or not


author: Matthias Clasen <mclasen@redhat.com> - 3.36.0-14
changelog:
  - Use autosetup
  - Rename 14.patch to gnome-menus-01.patch
  - Rearrange after design review
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.36.0-16
changelog:
  - Fix Calculator to be presented
  - Papers should be in Utilities and not in Graphics and Office
  - Resolves: RHEL-65839


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.11-5
changelog:
  - Fix abort when disconnecting from libei
  - Fix restarting the daemon state after a client has disconnected
    Resolves: RHEL-89455


author: Kalev Lember <klember@redhat.com> - 45.0-5
changelog:
  - Drop downstream patch that downgraded pretty_env_logger dep to 0.4
  - Don't use both meson and cargo for building
  - Migrate to SPDX license


author: Jakub Jelen <jjelen@redhat.com> - 2.4.5-5
changelog:
  - Make profile scripts more robust (RHEL-166369)
  - Add compatibility provides for new Fedora source verification (RHEL-142310)


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-3
changelog:
  - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
  - Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
  - Fix name constraint processing performance issue (CVE-2025-14831)
  - Drop unused patches


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-4
changelog:
  - Fix 3.8.13 CVEs and security issues, update Makefile.in
  - Fix CVE-2026-33846
  - Fix CVE-2026-42009
  - Fix CVE-2026-33845
  - Fix CVE-2026-42010
  - Fix CVE-2026-3833
  - Fix CVE-2026-42011
  - Fix CVE-2026-42012
  - Fix CVE-2026-42013
  - Fix CVE-2026-42014
  - Fix CVE-2026-5260
  - Fix CVE-2026-42015
  - Fix CVE-2026-3832
  - Fix CVE-2026-5419
  - Fix upstream security issue #1808
  - Fix upstream security issue #1810
  - Fix upstream security issue #1813
  - Fix upstream security issue #1818
  - Fix upstream security issue #1818
  - Fix upstream security issue #1819
  - Fix upstream security issue #1822
  - Fix upstream security issue #1841
  - Fix upstream security issue #1823
  - Fix upstream security issue #1817
  - Fix upstream security issue #1820
  - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Akira TAGOH <tagoh@redhat.com> - 20200215-15
changelog:
  - Drop the font unification which causes a lot of problems.
    Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789


author: Akira TAGOH <tagoh@redhat.com> - 20240101-4
changelog:
  - Updates to monthly release of 24.1.1
  - Remove substitute config for Symbol.
    Resolves: rhbz#2259962


author: Akira TAGOH <tagoh@redhat.com> - 20240201-2
changelog:
  - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
    Resolves: rhbz#2265259


author: Akira TAGOH <tagoh@redhat.com> - 20240301-3
changelog:
  - Add google-noto-fonts-all, google-noto-fonts-all-vf, and
    google-noto-fonts-all-static meta packages.


author: Akira TAGOh <tagoh@redhat.com> - 20240401-4
changelog:
  - Fix a typo in config.
  - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
  - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
    Resolves: RHEL-47289


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-vf-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-11
changelog:
  - internalize scons (RHEL-14750)
  - add missing IPv6 support
  - add note about limited Red Hat support
  - drop unneeded API-compatibility patch
  - fix busy wait when reading from gpsd socket
  - fix some issues reported by coverity and shellcheck


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-14
changelog:
  - fix annobin coverage (RHEL-33496)
  - add conflicts for gpsd-minimal (RHEL-33651)
  - drop compat subpackage (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-15
changelog:
  - fix icon path in desktop files (RHEL-34158)
  - replace gpsd-minimal conflicts with obsoletes (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-3
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-20
changelog:
  - Resolves RHEL-97520: Rework grafana-selinux spec file sections
  - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-22
changelog:
  - Resolves RHEL-125629: CVE-2025-58183
  - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-24
changelog:
  - Resolves RHEL-144949: CVE-2026-21721
  - Resolves RHEL-145413: CVE-2025-61728
  - Resolves RHEL-146073: CVE-2025-61726
  - Resolves RHEL-149246: CVE-2025-68121


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-26
changelog:
  - Resolves RHEL-161792: CVE-2026-27877
  - Resolves RHEL-166318: CVE-2026-33810
  - Resolves RHEL-166490: CVE-2026-32282
  - Resolves RHEL-167360: CVE-2026-32280
  - Resolves RHEL-167516: CVE-2026-32283


author: Sam Feifer <sfeifer@redhat.com> - 5.2.1-1
changelog:
  - Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG
  - Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release


author: Sam Feifer <sfeifer@redhat.com> - 5.3.0-5
changelog:
  - Resolves RHEL-166319: CVE-2026-33810
  - Resolves RHEL-166491: CVE-2026-32282
  - Resolves RHEL-167361: CVE-2026-32280
  - Resolves RHEL-167517: CVE-2026-32283


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Josue Hernandez <josherna@redhat.com> 2.12-44
changelog:
  - kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
  - Resolves: #RHEL-148309


author: Rolv Apneseth <rapneset@redhat.com> - 2.12-49
changelog:
  - mdraid: fix metadata 1.0 detection in userspace utilities on IEEE1275
  - grub-install: use search.fs_uuid for RAID1 on IEEE1275
  - Resolves: #RHEL-184859


author: Nicolas Frayer <nfrayer@redhat.com> - 2.12-51
changelog:
  - ieee1275/powerpc: implements fibre channel discovery for ofpathname
  - Resolves: #RHEL-102160
  - Resolves: #RHEL-102161


author: Wim Taymans <wtaymans@redhat.com> - 1.24.10-1
changelog:
  - Update to 1.24.10
    Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
    Resolves: RHEL-70960, RHEL-70947, RHEL-70934


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Matthias Clasen <mclasen@redhat.com> - 3.24.43-4
changelog:
  - Stop relying on xpms in the testsuite
    Resolves: RHEL-69453
  - Avoid criticals on headless systems
    Resolves: RHEL-40884
  - Hide emoji chooser unless explicitly requested
    Resolves: RHEL-65214


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.1-1
changelog:
  - New stable version 1.52.1
  - Rebase on top of patches from RHEL 9.5
  - Reboot Windows between each firstboot script to improve reliability
    resolves: RHEL-56319
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-56330
  - Add support for nbd+unix:// URIs
    resolves: RHEL-56332


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56812
  - Replace Jansson with json-c
    resolves: RHEL-65295


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-3
changelog:
  - Rebase to guestfs-tools 1.54.0
    resolves: RHEL-81734
  - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error
    resolves: RHEL-83201
  - virt-drivers fails on opensuse guest if kernel-source is installed
    resolves: RHEL-92604
  - builder: Update link to templates to use https
    resolves: RHEL-94873
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109129


author: Richard W.M. Jones <rjones@redhat.com> - 1.54.0-9
changelog:
  - Synchronize spec file with Fedora
  - Fix pnputils after virt-customize --inject-virtio-win
    resolves: RHEL-116537
  - Unify spec files between Fedora and RHEL.
  - Ensure a minimum version of libguestfs is installed at build and run time.
    resolves: RHEL-116716
  - Remove virt-customize subscription-manager options
    resolves: RHEL-122307
  - Add AV and GPOs to virt-inspector output
    resolves: RHEL-125955
  - Expose XFS version in virt-filesystems
    resolves: RHEL-144074


author: Richard W.M. Jones <rjones@redhat.com> - 1.55.9-1
changelog:
  - Rebase to guestfs-tools 1.55.9
    Synchronize spec file with Fedora
    resolves: RHEL-153360
  - Fix binary LUKS keys
    resolves: RHEL-171896
  - Windows firstboot: Add exit code 250 to skip reboots
    Rework documentation for firstboot feature
    resolves: RHEL-170706, RHEL-170708


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.3.4-11
changelog:
  - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
  - Add other licenses to License tag and use SPDX identifiers to comply with FPG


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83030


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-111948


author: Christophe Fergeau <cfergeau@redhat.com> - 6:0.8.7-2
changelog:
  - rebuild for CVE-2025-68121, CVE-2025-61726, CVE-2025-61729, CVE-2025-61728, CVE-2025-61729
  - Resolves: RHEL-140518
  - Resolves: RHEL-145414
  - Resolves: RHEL-146723
  - Resolves: RHEL-146928
  - Resolves: RHEL-149248


author: Jakub Martisko <jamartis@redhat.com> - 1.13-1
changelog:
  - Rebase to gzip 1.13
  - There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
  - Revert the s390x build options in the next release
  Resolves: rhbz#2232890


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.0.5-5
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120174


author: Petr Dancak <pdancak@redhat.com> - 3.23.12-9
changelog:
  - enable following links with curl in all use cases
    Resolves: RHEL-84817
  - hp-plugin-download wrongly parsed file type
    Resolves: RHEL-97437


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.23.12-11
changelog:
  - CVE-2026-8632 hplip: HPLIP: Privilege escalation and arbitrary code execution
    via operating system command injection [rhel-10.3]
  - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
    via integer overflow in hpcups [rhel-10.3]


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4
changelog:
  - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
    is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)
  - Resolves: RHEL-103489 - stickysession field does not work when
    specifying it in the query parameter after upgrade to 9.5


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-5
changelog:
  - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-6
changelog:
  - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-10
changelog:
  - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-12
changelog:
  - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-14
changelog:
  - Resolves: RHEL-173559 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
    code execution via heap-based buffer overflow (CVE-2026-28780)
  - Resolves: RHEL-175064 - httpd: NULL pointer dereference can cause a child
    process crash (CVE-2026-33007)
  - Resolves: RHEL-175087 - httpd: off-by-one out-of-bounds reads in AJP getter
    functions (CVE-2026-33857)
  - Resolves: RHEL-175044 - httpd: heap-based buffer over-read due to missing
    null-termination check (CVE-2026-34032)
  - Resolves: RHEL-175060 - httpd: heap-based buffer over-read and memory
    disclosure in ajp_parse_data() (CVE-2026-34059)


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20180807-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218154 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20190319-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218155 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20070116-32
changelog:
  - Use new source archive generated using Farsi aspell dictionary
  - Resolves:rhbz#2218158 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20040505-31
changelog:
  - Use new source archive generated using Manx aspell dictionary
  - Resolves:rhbz#2218159 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-3
changelog:
  - Fix Source and URL tags
  - Use correct upstream source tarball
  - Add Supplements for langpacks-ka
  - Enable this package to be used for EL < 9 version


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20090415-29
changelog:
  - Use new source archive generated using Kirghiz aspell dictionary
  - Resolves:rhbz#2218161 - Drop dependency on aspell


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.46.20220731git
changelog:
  - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
  - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
  - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
  - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
  - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
  - Resolves: RHEL-40107
    ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
  - Resolves: RHEL-40679
    ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.47.20220731git
changelog:
  - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
  - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
  - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
  - Resolves: RHEL-44617
    ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.49.20220731git
changelog:
  - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
  - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
  - Resolves: RHEL-65434
    ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.50.20220731git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
  - Resolves: RHEL-95811
    ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.51.20220731git
changelog:
  - hpvd-hv-hv_kvp_daemon-Update-to-v6.16.patch [RHEL-185419]
  - Resolves: RHEL-185419
    (Hyper-V host fails to display guest IP address in certain network configurations [rhel-10])


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-16
changelog:
  - tests: Update packages with comps-f41
  - Add base-graphical
  - Add fonts default
  - Delete libcanberra-gtk3, libproxy-duktape
  - Delete tmt for RHEL CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-18
changelog:
  - Update CI for RHEL10
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-5
changelog:
  - Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of
    directory instead of checking Fedora version.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.3-1
changelog:
  - Update to 1.17.3
  - Support several backends for playing sounds
    Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0


author: Mike FABIAN <mfabian@redhat.com> - 1.17.4-1
changelog:
  - Update to 1.17.4
  - Fix compose support for ibus >= 1.5.28
    (Resolves: https://github.com/mike-fabian/ibus-table/issues/145)
  - Translation update from Weblate (New language, Russian, (ru) 80%)
  - Use “<developer><name>…</name></developer>” in ibus-table.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.6-2
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    shell-extension-no-overview for the CI test


author: Mike FABIAN <mfabian@redhat.com> - 1.8.11-1
changelog:
  - Update to 1.8.11
  - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
  - Improve “improve_jyutping.py” to allow comments in the table
  - Update of jyutping.txt for Unicode 15.0.0 final release


author: Mike FABIAN <mfabian@redhat.com> - 1.8.12-1
changelog:
  - Update to 1.8.12
  - appdata.xml files are now included upstream, remove from the .spec file
  - Migrate license tags to SPDX format


author: Mike FABIAN <mfabian@redhat.com> - 2.25.4-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.4
  - Pass key which triggered cancel command to application if
    self._min_char_complete == 0 and there are no candidates (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/505)
  - Update emoji annotations from CLDR
  - Translation update from Weblate (ka 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.6-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.6
  - If Shift+something is pressed and then released, do not swallow the
    release of the Shift key (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/504)
  - Decrease grid_row_spacing from 5 to 1 pixels to make the setup tool still
    fit on a 1024x768 pixel screen


author: Mike FABIAN <mfabian@redhat.com> - 2.25.7-1
changelog:
  - Resolves: RHEL-31506 Release 2.25.7
  - Don’t use forward_key_event() on Gnome Wayland if the key might be a
    keyboard shortcut using a modifier (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/507)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.9-1
changelog:
  - Resolves: RHEL-36638 Update to 2.25.9 and Remove dependency on Xvfb from
    CI tests
  - Translation update from Weblate (cs 100%)
  - Update emoji annotations from CLDR
  - Drop Python < 3.6 support
  - Fix test_0_gtk.py: typing booster now avoids clearing the input in
    do_reset() when the preedit is empty
  - Remove dependency on Xvfb from ibus-typing-booster.spec
  - Support compose sequences containing ASCII keys written as <U00XX> code
    points (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/510)
  - Translation update from Weblate (pt 91.3%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.11-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.11
  - Yet another fix to make it possible again to use keys with Unicode
    keysyms in keybindings and make it work with all known versions of ibus
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497)
  - Use NFC when doing the cursor correction after committing a preedit using
    space (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/515)
  - Fix for ibus-1.5.30: Make it possible again to use keys with Unicode
    keysyms in keybindings (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/497)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.12-1
changelog:
  - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
    desktop-testing, ibus-desktop-testing, gnome-shell-extension-no-overview
    for the CI test


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-14
changelog:
  - updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2)
  - updated %patch to new syntax


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54331


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.7.0-2
changelog:
  - Rebase to JSS 5.7.0
  - Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
  - Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54333


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Peter Koprda <pkoprda@redhat.com> - 0:3.10.3-1
changelog:
  - Updates message of the day from Insights to Lightspeed
  - Resolves: RHEL-113967
  - Resolves: RHEL-122146


author: Peter Schrimpel <pschrimp@redhat.com> - 0:3.10.4-1
changelog:
  - Switch Meson build system for Makefile
  - Remove six dependency
  - Resolves: RHEL-143989
  - Resolves: RHEL-147443


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.11.1-1
changelog:
  - chore: print version.release in 'insights.version' module (#4670)
    (xiangceliu@redhat.com)
  - fix(test): filters.yaml for building RPM in packit for test (#4665)
    (xiangceliu@redhat.com)
  - chore(rpmbuild): refine the RPM spec file (#4669) (xiangceliu@redhat.com)
  - fix(parser): Deprecate the SsTUPLN parser (#4662) (xiangceliu@redhat.com)
  - feat: add filter "Name:" to InstalledProductIDs spec (#4660)
    (xiaoxwan@redhat.com)
  - chore(test): replace mock with unittest.mock (#4659) (xiangceliu@redhat.com)
  - spec: do hostname obfuscation for bootctl_status (#4657)
    (xiangceliu@redhat.com)
  - spec: remove localectl_status from RPM collection (#4655)
    (xiangceliu@redhat.com)
  - chore: print current version for tmt testing convenience (#4650)
    (xiangceliu@redhat.com)
  - fix: don't import FileListing in insights (#4647) (xiangceliu@redhat.com)
  - chore(ci/cd): remove py27 pipeline tests for master  (#4654)
    (xiangceliu@redhat.com)
  - feat(test): unit test for successful upload (#4641) (pschrimp@redhat.com)
  - fix(test): update the check of obfuscation warnings (#4648)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.1-1
changelog:
  - fix(datasource cleanning): clean datasource based on spec entry (#4692)
    (xiangceliu@redhat.com)
  - fix: handle no account_number in response data (#4687) (lichen@redhat.com)
  - chore(build): remove python2 requires from setup/pyproject (#4686)
    (xiangceliu@redhat.com)
  - fix: apply redacting and obfuscating for datasource specs (#4681)
    (xiangceliu@redhat.com)
  - fix: remove six from the core part code (#4671) (xiangceliu@redhat.com)
  - fix(malware-detection): malware scan yara error handling (#4678)
    (63891960+mtclinton@users.noreply.github.com)
  - Add new spec sys_block_queue_max_segment_size (#4645) (986222045@qq.com)
  - Add new spec ossl_files (#4668) (986222045@qq.com)
  - Add new spec ethtool_priv_flags (#4666) (986222045@qq.com)
  - chore(build): update packit to build with specific release (#4685)
    (xiangceliu@redhat.com)
  - fix(test): modify filter for spec sshd_test_mode (#4683)
    (zhangqianqian@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.2-1
changelog:
  - fix: traceback info in metadata JSON of filterable specs (#4694)
    (xiangceliu@redhat.com)
  - fix(spec): stop collecting sealert on RHEL 9 and older (#4698)
    (xiangceliu@redhat.com)
  - fix(doc): avoid too extensive cross-ref check (#4695) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.1-1
changelog:
  - spec: stop collecting tuned_adm on RHEL 9 when SELinux enabled (#4711)
    (xiangceliu@redhat.com)
  - chore(spec): remove cmd path added to support old RHEL (#4718)
    (xiangceliu@redhat.com)
  - spec: don't collect ansible_telemetry when SELinux is enabled (#4712)
    (xiangceliu@redhat.com)
  - fix(manifest): add SELinuxDisable to configs of default manifest (#4713)
    (xiangceliu@redhat.com)
  - chore(component): update and add new selinux components (#4709)
    (xiangceliu@redhat.com)
  - chore(parser): refine the SEStatus parser (#4706) (xiangceliu@redhat.com)
  - spec: add ansible_telemetry to collection (#4700) (xiangceliu@redhat.com)
  - fix: update the help message to -S/--show-rules option (#4702)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.2-1
changelog:
  - chore(setup): remove six from the dependencies (#4719)
    (xiangceliu@redhat.com)
  - fix(test): add filter for spec strings_shimx64_efi (#4721)
    (zhangqianqian@users.noreply.github.com)
  - chore: drop python2 support from insights-client (#4707)
    (pschrimp@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.3-1
changelog:
  - fix: don't collect teamd specs when SELinux is enabled (#4734)
    (xiangceliu@redhat.com)
  - chore(build): add build_client_egg script back to master (#4722)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.5-1
changelog:
  - Fix: Update ls to handle special lines (#4750) (986222045@qq.com)
  - feat: Malware Detection wildcards support and fix concurrent scan false
    positives (#4746) (63891960+mtclinton@users.noreply.github.com)
  - chore(pre-commit): update and add new hook conventional-pre-commit
    (xiangceliu@redhat.com)
  - chore(build): enable packit building for release branch
    (xiangceliu@redhat.com)
  - feat: add all rules scanned to malware detection upload (#4735)
    (63891960+mtclinton@users.noreply.github.com)
  - fix(data-processing): fix unpredictable behavior of --context (#4740)
    (71874510+jholecek-rh@users.noreply.github.com)
  - chore: remove planned deprecations for v3.7.0 (xiangceliu@redhat.com)
  - fix(rpm-build): add 'BuildRequires: pkgconfig(systemd)' back for insights-
    core-selinux (xiangceliu@redhat.com)
  - feat: New spec "/etc/modules-load.d/*.conf" and its parser (shlao@redhat.com)
  - chore(spec): New spec "podman system info --json" for data analysis
    (huali@redhat.com)
  - chore(manifests): remove/merge remained useless components (#4747)
    (xiangceliu@redhat.com)
  - chore(manifests): use the base module instead of component (#4730)
    (xiangceliu@redhat.com)
  - chore: add egg_release back to collection with a condition (#4729)
    (xiangceliu@redhat.com)
  - fix(build): prepare the filters.yaml before setting up  (#4745)
    (xiangceliu@redhat.com)
  - chore(spec): update SELinux relevant specs (#4728) (xiangceliu@redhat.com)
  - chore(spec): remove SELinuxDisable depdencies from ansible_telemetry (#4731)
    (xiangceliu@redhat.com)
  - chore: remove unused lines from PR template (#4725) (xiangceliu@redhat.com)
  - chore(test): don't pass context when root is passed to initialize_broker
    (#4720) (xiangceliu@redhat.com)
  - chore: update PR template and remove RPM/Egg delivery guide (#4723)
    (xiangceliu@redhat.com)
  - feat: New spec "strings /boot/efi/EFI/redhat/shimx64.efi" and its parser
    (#4705) (44796653+huali027@users.noreply.github.com)
  - feat: New spec "/bin/mokutil --db --short" and the parser (#4704)
    (44796653+huali027@users.noreply.github.com)
  - fix(ci/cd): enable CI/CD for release branch (xiangceliu@redhat.com)
  - feat: add CoreEgg/CoreRpm to identify current collector (#4724)
    (xiangceliu@redhat.com)


author: Jaylin Zhou <zzhou@redhat.com> 3.7.6-1
changelog:
  - fix: add retry for fetching tailoring file (#4768)
    (33912805+LightOfHeaven1994@users.noreply.github.com)
  - Add new spec sys_block_queue_discard_max_bytes (#4766) (986222045@qq.com)


author: Ping Qin <piqin@redhat.com> 3.7.7-1
changelog:
  - feat: Add new datasource spec azure_instance_compute_metadata (#4772)
    (30404410+qinpingli@users.noreply.github.com)


author: Vladislav Dronov <vdronov@redhat.com> - 1.9.0-2
changelog:
  - Enable Intel CET support and install tests
  - Enable Intel CET support in assembler sources
    (https://github.com/intel/qpl/pull/56)
  - Make tests installable as intel-qpl-tests package
    (https://github.com/intel/qpl/pull/57)
  - Build a standalone googletest-1.14.0 library as static
  - Switch SANITIZE_THREADS off as ThreadSanitizer introduces massive
    overhead
  - Fix accel_conf.sh warning
  - Adjust the package description
  - Adjust a test set run in a check stage
  - Adjust the package files layout


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-27
changelog:
  - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
  - Resolves: RHEL-119628 Include fixes in python3-ipatests
  - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
  - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
  - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
  - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
  - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
  - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-113778 Command that retrieve and install new CA certificates
  - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-119339 Memory leaks in IPA plugins


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
  - Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
  - Resolves:  RHEL-4895 ipa use systemd-sysusers
  - Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-3.1
changelog:
  - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
  - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
  - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package


author: Rob Crittenden <rcritten@redhat.com> - 0.16-6
changelog:
  - Skip DogtagCertsConfigCheck for PKI versions >= 11.5.0 (RHEL-39701)
  - Need to change log file permissions of IPA as per CIS benchmark (RHEL-44305)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-9
changelog:
  - Don't require fips-mode-setup for FIPS status (RHEL-67635)
  - Check for krbLastSuccessfulAuth being enabled (RHEL-84771)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-11
changelog:
  - IPAOpenSSLChainValidation: ignore default trust store (RHEL-99999)
  - Don't rely on order in trust agent/controller role check (RHEL-99532)


author: Rob Crittenden <rcritten@redhat.com> - 0.19-1
changelog:
  - Update to 0.19 release
    - Add a message if not a trust agent/controller (RHEL-112752)
    - Check that expected NSS token matches the current FIPS state (RHEL-104144)
    - Add /etc/pki/tls/certs/ directory to file checker (RHEL-94649)
    - Check that allowed_uids in the SSSD config is valid (RHEL-116895)


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
changelog:
  - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
  - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
changelog:
  - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
  - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]


author: Phil Sutter <psutter@redhat.com> [1.8.11-14.el10]
changelog:
  - tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
  - spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]


author: Phil Sutter <psutter@redhat.com> [1.8.11-15.el10]
changelog:
  - spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]


author: Jan Macku <jamacku@redhat.com> - 20240905-3
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94582)


author: Brian C. Lane <bcl@redhat.com> - 1.2.5-1
changelog:
  - New Version 1.2.5 (bcl)
    Resolves: RHEL-45005
  - testpyisomd5sum.py: Use a consistent iso size (bcl)
  - Remove quiet from iso creation, size seems wrong (bcl)
  - workflows: Move to Fedora 39 and checkout v4 (bcl)
  - Add support for riscv64 (davidlt)
  - workflows: Update to use actions/checkout (bcl)
  - Add a GitHub Action to run tests (bcl)
  - Add mips64 (wangray1021)
  - testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101803
  - Resolves: RHEL-103211


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101803


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102295


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118771
  - Resolves: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118771
  - Related: RHEL-119468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142857
  - Resolves: RHEL-139565
  - Resolves: RHEL-131428
  - Resolves: RHEL-131441
  - Resolves: RHEL-142861
  - Resolves: RHEL-142815
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142857
  - Related: RHEL-139565
  - Related: RHEL-131428
  - Related: RHEL-131441
  - Related: RHEL-142861
  - Related: RHEL-142815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.11.0.10-1
changelog:
  - Update to jdk-21.0.11+10 (GA)
  - Update release notes to 21.0.11+10
  - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: RHEL-169611
  - Resolves: RHEL-133215
  - Resolves: RHEL-146648
  - Resolves: RHEL-148326
  - Resolves: RHEL-148828
  - Resolves: RHEL-157090
  - Resolves: RHEL-161216
  - Resolves: RHEL-161332
  - Resolves: RHEL-169614


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-5
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Resolves: RHEL-133733
  - Resolves: RHEL-133735
  - Resolves: RHEL-133763


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-6
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-133733
  - Related: RHEL-133735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139579
  - Resolves: RHEL-131430
  - Resolves: RHEL-131443
  - Resolves: RHEL-142855
  - Resolves: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139579
  - Related: RHEL-131430
  - Related: RHEL-131443
  - Related: RHEL-142855
  - Related: RHEL-142799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
  - Fix FIPS issue list to represent the new 25u version
  - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
  - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
  - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
  - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526
  - Bump harfbuzz version to 12.3.2 following JDK-8375057
  - Bump nssadapter version to bring in shared PKCS11 session fix
  - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
  - Resolves: RHEL-155000
  - Resolves: RHEL-146649
  - Resolves: RHEL-148327
  - Resolves: RHEL-148830
  - Resolves: RHEL-155044


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.2.0.10-3
changelog:
  - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
  - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
  - Resolves: RHEL-150976


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-4
changelog:
  - Add tagging scripts with signature checks and gating handling
  - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3.
  - Add gating scripts to simplify obtaining results and waiving issues
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-155327
  - Resolves: RHEL-155337
  - Resolves: RHEL-155339
  - Related: RHEL-155000
  - Related: RHEL-146649
  - Related: RHEL-148327
  - Related: RHEL-148830


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.3.0.9-1
changelog:
  - Update to jdk-25.0.3+9 (GA)
  - Update release notes to 25.0.3+9
  - Update FIPS patch to 57722aab802 version synced with 25.0.3+8
  - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream
  - Drop local HarfBuzz patch now JDK-8375057 is included upstream
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Bump tzdata version to 2026a following JDK-8379035
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: RHEL-169620
  - Resolves: RHEL-157091
  - Resolves: RHEL-161217
  - Resolves: RHEL-161333
  - Resolves: RHEL-169613


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 6.2.0-10
changelog:
  - Switch to OpenJDK 21 as default JDK/JRE
  - Drop generated Requires on JRE
  - Drop subpackages related to Java other than 21
  - Resolves: RHEL-49822, RHEL-51276, RHEL-51276


author: Čestmír Kalina <ckalina@redhat.com> - 0.29giteedfcb
changelog:
  - Bump release and update to the latest upstream version
    Fix DW_TAG_unspecified_type issue
    Resolves: RHEL-52280


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-239.el10]
changelog:
  - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-183464]
  - io_uring: Fix KASAN UAF in io_kbuf_recycle_legacy (Jeff Moyer) [RHEL-183200]
  - crypto: krb5 - filter out async aead implementations at alloc (Ilya Dryomov) [RHEL-182119]
  - crypto: krb5enc - fix async decrypt skipping hash verification (Ilya Dryomov) [RHEL-182119]
  - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (Ilya Dryomov) [RHEL-182119]
  - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (Ilya Dryomov) [RHEL-182119]
  - driver core: generalize driver_override in struct device (Mircea Dragan) [RHEL-113464]
  - PCI: Initialize temporary device in new_id_store() (Mircea Dragan) [RHEL-113464]
  - s390/ap: use generic driver_override infrastructure (Mircea Dragan) [RHEL-113464]
  - s390/ap: Restrict driver_override versus apmask and aqmask use (Mircea Dragan) [RHEL-113464]
  - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Mircea Dragan) [RHEL-113464]
  - s390/ap: Support driver_override for AP queue devices (Mircea Dragan) [RHEL-113464]
  - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Mircea Dragan) [RHEL-113464]
  - redhat/configs: set NXP storage driver to built-in for boot speed (Ed Chong) [RHEL-181039]
  - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180316] {CVE-2026-43260}
  - objtool: Fix Clang jump table detection (Yannick Cote) [RHEL-152189]
  - objtool/klp: fix mkstemp() failure with long paths (Yannick Cote) [RHEL-152189]
  - objtool/klp: fix data alignment in __clone_symbol() (Yannick Cote) [RHEL-152189]
  - objtool: Fix another stack overflow in validate_branch() (Yannick Cote) [RHEL-152189]
  - objtool: Handle Clang RSP musical chairs (Yannick Cote) [RHEL-152189]
  - objtool: Fix ERROR_INSN() error message (Yannick Cote) [RHEL-152189]
  - objtool: Fix data alignment in elf_add_data() (Yannick Cote) [RHEL-152189]
  - objtool: Use HOSTCFLAGS for HAVE_XXHASH test (Yannick Cote) [RHEL-152189]
  - objtool/klp: Avoid NULL pointer dereference when printing code symbol name (Yannick Cote) [RHEL-152189]
  - objtool/klp: Disable unsupported pr_debug() usage (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix detection of corrupt static branch/call entries (Yannick Cote) [RHEL-152189]
  - kbuild: Leave objtool binary around with 'make clean' (Yannick Cote) [RHEL-152189]
  - kbuild: Add objtool to top-level clean target (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix symbol correlation for orphaned local symbols (Yannick Cote) [RHEL-152189]
  - objtool/klp: Fix bug table handling for __WARN_printf() (Yannick Cote) [RHEL-152189]
  - objtool: Replace custom macros in elf.c with shared ones (Yannick Cote) [RHEL-152189]
  - objtool: Print bfd_vma as unsigned long long on ia32-x86_64 cross build (Yannick Cote) [RHEL-152189]
  - objtool: Fix libopcodes linking with static libraries (Yannick Cote) [RHEL-152189]
  - kbuild: prefer ${NM} in check-function-names.sh (Yannick Cote) [RHEL-152189]
  - objtool: fix build failure due to missing libopcodes check (Yannick Cote) [RHEL-152189]
  - objtool: fix compilation failure with the x32 toolchain (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool: Add more robust signal error handling, detect and warn about stack overflows (Yannick Cote) [RHEL-152189]
  - objtool: Fix stack overflow in validate_branch() (Yannick Cote) [RHEL-152189]
  - objtool: Fix segfault on unknown alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Build with disassembly can fail when including bdf.h (Yannick Cote) [RHEL-152189]
  - objtool: Trim trailing NOPs in alternative (Yannick Cote) [RHEL-152189]
  - objtool: Add wide output for disassembly (Yannick Cote) [RHEL-152189]
  - objtool: Compact output for alternatives with one instruction (Yannick Cote) [RHEL-152189]
  - objtool: Improve naming of group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Add Function to get the name of a CPU feature (Yannick Cote) [RHEL-152189]
  - objtool: Provide access to feature and flags of group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Fix address references in alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble jump table alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble exception table alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Print addresses with alternative instructions (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble group alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Print headers for alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Preserve alternatives order (Yannick Cote) [RHEL-152189]
  - objtool: Add the --disas=<function-pattern> action (Yannick Cote) [RHEL-152189]
  - objtool: Do not validate IBT for .return_sites and .call_sites (Yannick Cote) [RHEL-152189]
  - objtool: Improve tracing of alternative instructions (Yannick Cote) [RHEL-152189]
  - objtool: Add functions to better name alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Identify the different types of alternatives (Yannick Cote) [RHEL-152189]
  - objtool: Improve register reporting during function validation (Yannick Cote) [RHEL-152189]
  - objtool: Trace instruction state changes during function validation (Yannick Cote) [RHEL-152189]
  - objtool: Add option to trace function validation (Yannick Cote) [RHEL-152189]
  - objtool: Record symbol name max length (Yannick Cote) [RHEL-152189]
  - objtool: Extract code to validate instruction from the validate branch loop (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble instruction on warning or backtrace (Yannick Cote) [RHEL-152189]
  - objtool: Store instruction disassembly result (Yannick Cote) [RHEL-152189]
  - objtool: Print symbol during disassembly (Yannick Cote) [RHEL-152189]
  - tool build: Remove annoying newline in build output (Yannick Cote) [RHEL-152189]
  - objtool: Disassemble code with libopcodes instead of running objdump (Yannick Cote) [RHEL-152189]
  - objtool: Create disassembly context (Yannick Cote) [RHEL-152189]
  - objtool: Move disassembly functions to a separated file (Yannick Cote) [RHEL-152189]
  - objtool: Remove second pass of .cold function correlation (Yannick Cote) [RHEL-152189]
  - objtool: Skip non-canonical aliased symbols in add_jump_table_alts() (Yannick Cote) [RHEL-152189]
  - objtool: Return canonical symbol when aliases exist in symbol finding helpers (Yannick Cote) [RHEL-152189]
  - objtool: Don't alias undefined symbols (Yannick Cote) [RHEL-152189]
  - objtool: Fix .cold function detection for duplicate symbols (Yannick Cote) [RHEL-152189]
  - objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189]
  - objtool/rust: add one more `noreturn` Rust function (Yannick Cote) [RHEL-152189]
  - objtool: Remove unneeded semicolon (Yannick Cote) [RHEL-152189]
  - objtool/x86: Fix NOP decode (Yannick Cote) [RHEL-152189]
  - objtool/x86: Add UDB support (Yannick Cote) [RHEL-152189]
  - objtool/LoongArch: Mark special atomic instruction as INSN_BUG type (Yannick Cote) [RHEL-152189]
  - objtool/LoongArch: Mark types based on break immediate code (Yannick Cote) [RHEL-152189]
  - livepatch/klp-build: Fix inconsistent kernel version (Yannick Cote) [RHEL-152193]
  - livepatch: Free klp_{object,func}_ext data after initialization (Yannick Cote) [RHEL-152193]
  - livepatch: Fix having __klp_objects relics in non-livepatch modules (Yannick Cote) [RHEL-152193]
  - livepatch/klp-build: Require Clang assembler >= 20 (Yannick Cote) [RHEL-152193]
  - livepatch/klp-build: Fix klp-build vs CONFIG_MODULE_SRCVERSION_ALL (Yannick Cote) [RHEL-152193]
  - selftests: livepatch: use canonical ftrace path (Yannick Cote) [RHEL-152193]
  - livepatch: Match old_sympos 0 and 1 in klp_find_func() (Yannick Cote) [RHEL-152193]
  - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: fix OOB read in compat_mtw_from_user (Florian Westphal) [RHEL-168848]
  - netfilter: xt_cpu: prefer raw_smp_processor_id (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-168848]
  - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-168848]
  - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-168848]
  - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: annotate "pos" for concurrent readers/writers (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Fix data race between add and dump in all hash types (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Fix data race between add and list header in all hash types (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-168848]
  - netfilter: nft_inner: release local_lock before re-enabling softirqs (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: stop hash:* range iteration at end (Florian Westphal) [RHEL-168848]
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: fix a potential dump-destroy race (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-168848]
  - netfilter: bridge: eb_tables: close module init race (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: close dangling table module init race (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: close dangling table module init race (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: move to two-stage removal scheme (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add and use xtables_unregister_table_exit (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: unregister the templates first (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: allocate hook ops while under mutex (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: allow initial table replace without emitting audit log message (Florian Westphal) [RHEL-168848]
  - ipvs: do not leak dest after get from dest trash (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: use skb_pull_rcsum() to pop vlan/pppoe header (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: fix inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: fix inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: ensure sufficient headroom in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: fix L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: skip L4 header parsing for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_socket: skip socket lookup for non-first fragments (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-168848]
  - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-168848]
  - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-168848]
  - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-168848]
  - netfilter: skip recording stale or retransmitted INIT (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-168848]
  - netfilter: reject zero shift in nft_bitwise (Florian Westphal) [RHEL-168848]
  - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-168848]
  - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-168848]
  - netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-168848]
  - ipvs: fix MTU check for GSO packets in tunnel mode (Florian Westphal) [RHEL-168848]
  - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-168848]
  - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_tproxy.sh: adjust to socat changes (Florian Westphal) [RHEL-168848]
  - netfilter: require Ethernet MAC header before using eth_hdr() (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_fwd_netdev: check ttl/hl before forwarding (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove UDP-Lite conntrack support (Florian Westphal) [RHEL-168848]
  - netfilter: xt_socket: enable defrag after all other checks (Florian Westphal) [RHEL-168848]
  - netfilter: xt_HL: add pr_fmt and checkentry validation (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink: prefer skb_mac_header helpers (Florian Westphal) [RHEL-168848]
  - netfilter: x_physdev: reject empty or not-nul terminated device names (Florian Westphal) [RHEL-168848]
  - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-168848]
  - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-168848]
  - ipvs: fix NULL deref in ip_vs_add_service error path (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: Correct indentation when H323_TRACE defined (Florian Westphal) [RHEL-168848]
  - netfilter: nft_meta: add double-tagged vlan and pppoe support (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add netlink policy based cap on registers (Florian Westphal) [RHEL-168848]
  - netfilter: add more netlink-based policy range checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: remove unreliable debug code in decode_octstr (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: remove net variable shadowing (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Fix typo in enum description (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: drop logically empty buckets in mtype_del (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: revisit array resize logic (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-168848]
  - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-168848]
  - netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_time: use unsigned int for monthday bit shift (Florian Westphal) [RHEL-168848]
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Florian Westphal) [RHEL-168848]
  - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-168848]
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-168848]
  - netfilter: nf_flow_table_ip: reset mac header before vlan push (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: guard option walkers against 1-byte tail reads (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Fix for duplicate device in netdev hooks (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: remove locking in nfqnl_get_sk_secctx (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: remove register tracking infrastructure (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: drop obsolete EXPORT_SYMBOLs (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: don't disable bh when acquiring tree lock (Florian Westphal) [RHEL-168848]
  - ipvs: do not keep dest_dst after dest is removed (Florian Westphal) [RHEL-168848]
  - ipvs: do not keep dest_dst if dev is going down (Florian Westphal) [RHEL-168848]
  - ipvs: skip ipv6 extension headers for csum checks (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: revert commit_mutex usage in reset path (Florian Westphal) [RHEL-168848]
  - netfilter: nft_quota: use atomic64_xchg for reset (Florian Westphal) [RHEL-168848]
  - netfilter: nft_counter: serialize reset with spinlock (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: validate element belonging to interval (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null interval (Florian Westphal) [RHEL-168848]
  - netfilter: nft_counter: fix reset of counters on 32bit archs (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: add IPV6_TUNNEL to config (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: dedicated slab for flow entry (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_queue.sh: add udp fraglist gro test case (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: don't gc elements on insert (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-168848]
  - netfilter: xt_time: use is_leap_year() helper (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add IP6IP6 flowtable selftest (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IP6IP6 tx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IP6IP6 rx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: Introduce tunnel metadata info in nf_flowtable_ctx struct (Florian Westphal) [RHEL-168848]
  - netfilter: Add ctx pointer in nf_flow_skb_encap_protocol/nf_flow_ip4_tunnel_proto signature (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: remove seqcount_rwlock_t (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: use binary search array in get command (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_rbtree: translate rbtree to array for binary search (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: add .abort_skip_removal flag for set types (Florian Westphal) [RHEL-168848]
  - netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: fix tracking of connections from localhost (Florian Westphal) [RHEL-168848]
  - netfilter: nft_compat: add more restrictions on netlink attributes (Florian Westphal) [RHEL-168848]
  - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-168848]
  - netfilter: don't include xt and nftables.h in unrelated subsystems (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack: enable icmp clash support (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: increase the connection clean up limit to 64 (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conntrack: Add allow_clash to generic protocol handler (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: reset table validation state on abort (Florian Westphal) [RHEL-168848]
  - netfilter: replace -EEXIST with -EBUSY (Florian Westphal) [RHEL-168848]
  - netfilter: nft_synproxy: avoid possible data-race on update operation (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: fix range overlap detection (Florian Westphal) [RHEL-168848]
  - audit: add audit_log_nf_skb helper function (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: prefer xfail in case race wasn't triggered (Florian Westphal) [RHEL-168848]
  - netfilter: always set route tuple out ifindex (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: fix leaked ct in error paths (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: improve UAPI kernel-doc comments (Florian Westphal) [RHEL-168848]
  - netfilter: ip6t_srh: fix UAPI kernel-doc comments format (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add the capability to send IPv6 TCP traffic (Florian Westphal) [RHEL-168848]
  - netfilter: nft_connlimit: add support to object update operation (Florian Westphal) [RHEL-168848]
  - netfilter: nft_connlimit: update the count if add was skipped (Florian Westphal) [RHEL-168848]
  - netfilter: nf_conncount: rework API to use sk_buff directly (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_flowtable.sh: Add IPIP flowtable selftest (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IPIP tx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: Add IPIP rx sw acceleration (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: use tuple address to calculate next hop (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: remove hw_ifidx (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: inline pppoe encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: inline vlan encapsulation in xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: consolidate xmit path (Florian Westphal) [RHEL-168848]
  - netfilter: flowtable: move path discovery infrastructure to its own file (Florian Westphal) [RHEL-168848]
  - netfilter: fix typo in nf_conntrack_l4proto.h comment (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: disable 0 value for conntrack_max setting (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: query conntrack state to check for port clash resolution (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_fib.sh: fix spurious test failures (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-168848]
  - netfilter: nf_reject: don't reply to icmp error messages (Florian Westphal) [RHEL-168848]
  - netfilter: nft_meta_bridge: introduce NFT_META_BRI_IIFHWADDR support (Florian Westphal) [RHEL-168848]
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: fix udpclash tool hang (Florian Westphal) [RHEL-168848]
  - netfilter: nft_payload: extend offset to 65535 bytes (Florian Westphal) [RHEL-168848]
  - netfilter: nf_reject: remove unneeded exports (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: remove redundant test for avx feature bit (Florian Westphal) [RHEL-168848]
  - netfilter: nft_payload: Use csum_replace4() instead of opencoding (Florian Westphal) [RHEL-168848]
  - netfilter: ebtables: Use vmalloc_array() to improve code (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo: use avx2 algorithm for insertions too (Florian Westphal) [RHEL-168848]
  - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-168848]
  - netfilter: ctnetlink: remove refcounting in dying list dumping (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Remove unused nft_reduce_is_readonly() (Florian Westphal) [RHEL-168848]
  - netfilter: x_tables: Remove unused functions xt_{in|out}name() (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: tone-down conntrack clash test (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: conntrack_resize.sh: also use udpclash tool (Florian Westphal) [RHEL-168848]
  - selftests: netfilter: add conntrack clash resolution test case (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Reintroduce shortened deletion notifications (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Drop dead code from fill_*_info routines (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: remove DCCP protocol support (Florian Westphal) [RHEL-168848]
  - netfilter: nf_dup_netdev: Move the recursion counter struct netdev_xmit (Florian Westphal) [RHEL-168848]
  - netfilter: nf_dup{4, 6}: Move duplication check to task_struct (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: Remove redundant NFCT_ALIGN call (Florian Westphal) [RHEL-168848]
  - netfilter: xt_cgroup: Make it independent from net_cls (Florian Westphal) [RHEL-168848]
  - netfilter: xt_IDLETIMER: convert timeouts to secs_to_jiffies() (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: Only use nf_skip_indirect_calls() when MITIGATION_RETPOLINE (Florian Westphal) [RHEL-168848]
  - netfilter: xtables: Use strscpy() instead of strscpy_pad() (Florian Westphal) [RHEL-168848]
  - netfilter: xt_hashlimit: replace vmalloc calls with kvmalloc (Florian Westphal) [RHEL-168848]
  - netfilter: conntrack: cleanup timeout definitions (Florian Westphal) [RHEL-168848]
  - netfilter: bitwise: add support for doing AND, OR and XOR directly (Florian Westphal) [RHEL-168848]
  - netfilter: bitwise: rename some boolean operation functions (Florian Westphal) [RHEL-168848]
  - netfilter: nf_tables: replace deprecated strncpy with strscpy_pad (Florian Westphal) [RHEL-168848]
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175537] {CVE-2026-31474}
  - dmaengine: dw-edma: Add non-LL mode (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add AMD MDB Endpoint Support (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Add device_{pause,resume}() callbacks (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Add device_tx_status() callback (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Use rz_lmdesc_setup() to invalidate descriptors (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop unnecessary local_irq_save() call (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop goto instruction and label (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Drop read of CHCTRL register (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: add RZ/{T2H,N2H} support (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: make register_dma_req() chip-specific (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz_dmac: make error interrupt optional (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add virtual IRQ for interrupt-emulation doorbells (Eder Zulian) [RHEL-172442]
  - dmaengine: dw_edma: correct kernel-doc warnings in <linux/dma/edma.h> (Eder Zulian) [RHEL-172442]
  - New configs in drivers/dma (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Add interrupt-emulation hooks (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Protect the driver specific lists (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix leaking event log memory (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix freeing the allocated ida too late (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix memory leak when a wq is reset (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix not releasing workqueue on .release() (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Wait for submitted operations on .device_synchronize() (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Flush all pending descriptors (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Flush kernel workqueues on Function Level Reset (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix possible invalid memory access after FLR (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix crash when the event log is disabled (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Fix lockdep warnings when calling idxd_device_config() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: fix MSI data programming for multi-IRQ case (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: adm: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: bcm2835-dma: use sg_nents_for_dma() helper (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Add Max SGL Size Support for DSA3.0 (Eder Zulian) [RHEL-154485 RHEL-172442]
  - dmaengine: idxd: Expose DSA3.0 capabilities through sysfs (Eder Zulian) [RHEL-154485 RHEL-172442]
  - dmaengine: sh: rz-dmac: Make channel irq local (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: uapi: use UAPI types (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: Discard pm_runtime_put() return value (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: Remove redundant pm_runtime_mark_last_busy() calls (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: k3-udma: enable compile testing (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: use lock guards (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: bam_dma: order includes alphabetically (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Fix confusing cleanup.h syntax (Eder Zulian) [RHEL-172442]
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() (Eder Zulian) [RHEL-172442]
  - dmaengine: tegra-adma: Fix use-after-free (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: k3-udma: fix device leak on udma lookup (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: clean up dra7x route allocation error paths (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Eder Zulian) [RHEL-172442]
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: rz-dmac: fix device leak on probe failure (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Eder Zulian) [RHEL-172442]
  - dmaengine: dw: dmamux: fix OF node leak on route allocation failure (Eder Zulian) [RHEL-172442]
  - dmaengine: tegra210-adma: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: dw: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: bcm2835: drop unused module alias (Eder Zulian) [RHEL-172442]
  - dmaengine: qcom: gpi: Add GPI Block event interrupt support (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: drain ATS translations when disabling WQ (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: Kconfig: Drop ARCH_R7S72100/ARCH_RZG2L dependency (Eder Zulian) [RHEL-172442]
  - dmaengine: rcar-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442]
  - dmaengine: rcar-dmac: Remove dummy Runtime PM callback (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: usb-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172442]
  - dmaengine: dw-edma: Set status for callback_result (Eder Zulian) [RHEL-172442]
  - dmaengine: Fix dma_async_tx_descriptor->tx_submit documentation (Eder Zulian) [RHEL-172442]
  - dmaengine: sh: setup_xref error handling (Eder Zulian) [RHEL-172442]
  - dmaengine: Replace zero-length array with flexible-array (Eder Zulian) [RHEL-172442]
  - dmaengine: idxd: Replace memset(0) + strscpy() with strscpy_pad() (Eder Zulian) [RHEL-172442]
  - ice: dpll: fix misplaced header macros (Michal Schmidt) [RHEL-137412]
  - ice: dpll: fix rclk pin state get for E810 (Michal Schmidt) [RHEL-137412]
  - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Michal Schmidt) [RHEL-137412]
  - ice: fix locking in ice_dcb_rebuild() (Michal Schmidt) [RHEL-137412]
  - ice: fix setting RSS VSI hash for E830 (Michal Schmidt) [RHEL-137412]
  - ice: add dpll peer notification for paired SMA and U.FL pins (Michal Schmidt) [RHEL-137412]
  - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Michal Schmidt) [RHEL-137412]
  - ice: fix missing dpll notifications for SW pins (Michal Schmidt) [RHEL-137412]
  - ice: fix SMA and U.FL pin state changes affecting paired pin (Michal Schmidt) [RHEL-137412]
  - ice: fix missing SMA pin initialization in DPLL subsystem (Michal Schmidt) [RHEL-137412]
  - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Michal Schmidt) [RHEL-137412]
  - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Michal Schmidt) [RHEL-137412]
  - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Michal Schmidt) [RHEL-137412]
  - ice: fix ready bitmap check for non-E822 devices (Michal Schmidt) [RHEL-137412]
  - ice: perform PHY soft reset for E825C ports at initialization (Michal Schmidt) [RHEL-137412]
  - ice: fix timestamp interrupt configuration for E825C (Michal Schmidt) [RHEL-137412]
  - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Michal Schmidt) [RHEL-137412]
  - ice: fix race condition in TX timestamp ring cleanup (Michal Schmidt) [RHEL-137412]
  - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Michal Schmidt) [RHEL-137412]
  - ice: fix PHY config on media change with link-down-on-close (Michal Schmidt) [RHEL-137412]
  - ice: Fix memory leak in ice_set_ringparam() (Michal Schmidt) [RHEL-137412]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [ice] (Michal Schmidt) [RHEL-137412]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [ice] (Michal Schmidt) [RHEL-137412]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [ice] (Michal Schmidt) [RHEL-137412]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [ice] (Michal Schmidt) [RHEL-137412]
  - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-137412]
  - ice: fix double free in ice_sf_eth_activate() error path (Michal Schmidt) [RHEL-137412]
  - ice: update PCS latency settings for E825 10G/25Gb modes (Michal Schmidt) [RHEL-137412]
  - ice: fix 'adjust' timer programming for E830 devices (Michal Schmidt) [RHEL-137412]
  - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Michal Schmidt) [RHEL-137412]
  - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Michal Schmidt) [RHEL-137412]
  - ice: Make name member of struct ice_cgu_pin_desc const (Michal Schmidt) [RHEL-137412]
  - ice: fix PTP timestamping broken by SyncE code on E825C (Michal Schmidt) [RHEL-137412]
  - ice: ptp: don't WARN when controlling PF is unavailable (Michal Schmidt) [RHEL-137412]
  - ice: use ice_update_eth_stats() for representor stats (Michal Schmidt) [RHEL-137412]
  - ice: fix inverted ready check for VF representors (Michal Schmidt) [RHEL-137412]
  - drivers: net: ice: fix devlink parameters get without irdma (Michal Schmidt) [RHEL-137412]
  - ice: fix rxq info registering in mbuf packets (Michal Schmidt) [RHEL-137412]
  - ice: fix retry for AQ command 0x06EE (Michal Schmidt) [RHEL-137412]
  - ice: reintroduce retry mechanism for indirect AQ (Michal Schmidt) [RHEL-137412]
  - ice: fix adding AQ LLDP filter for VF (Michal Schmidt) [RHEL-137412]
  - ice: recap the VSI and QoS info after rebuild (Michal Schmidt) [RHEL-137412]
  - ice: fix missing TX timestamps interrupts on E825 devices (Michal Schmidt) [RHEL-137412]
  - ice: stop counting UDP csum mismatch as rx_errors (Michal Schmidt) [RHEL-137412]
  - ice: reshuffle and group Rx and Tx queue fields by cachelines (Michal Schmidt) [RHEL-137412]
  - ice: convert all ring stats to u64_stats_t (Michal Schmidt) [RHEL-137412]
  - ice: shorten ring stat names and add accessors (Michal Schmidt) [RHEL-137412]
  - ice: use u64_stats API to access pkts/bytes in dim sample (Michal Schmidt) [RHEL-137412]
  - ice: remove ice_q_stats struct and use struct_group (Michal Schmidt) [RHEL-137412]
  - ice: pass pointer to ice_fetch_u64_stats_per_ring (Michal Schmidt) [RHEL-137412]
  - ice: unify PHY FW loading status handler for E800 devices (Michal Schmidt) [RHEL-137412]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Waiman Long) [RHEL-171746]
  - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171457] {CVE-2026-31636}
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171437] {CVE-2026-31607}
  - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171420] {CVE-2026-31641}
  - vxlan: validate ND option lengths in vxlan_na_create (Guillaume Nault) [RHEL-152728]
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-152728]
  - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Guillaume Nault) [RHEL-152728]
  - net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Guillaume Nault) [RHEL-152728]
  - ipv4: ip_gre: make ipgre_header() robust (Guillaume Nault) [RHEL-152728]
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Guillaume Nault) [RHEL-152728]
  - ipv4: ip_tunnel: spread netdev_lockdep_set_classes() (Guillaume Nault) [RHEL-152728]
  - arp: do not assume dev_hard_header() does not change skb->head (Guillaume Nault) [RHEL-152728]
  - erspan: Initialize options_len before referencing options. (Guillaume Nault) [RHEL-152728]
  - ip6_gre: make ip6gre_header() robust (Guillaume Nault) [RHEL-152728]
  - selftest: packetdrill: add tcp_timestamping_tcp_tx_timestamp_bug.pkt (Paolo Abeni) [RHEL-152718]
  - tcp: secure_seq: add back ports to TS offset (Paolo Abeni) [RHEL-152718]
  - net/tcp-md5: Fix MAC comparison to be constant-time (Paolo Abeni) [RHEL-152718]
  - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-152718]
  - tcp: tcp_tx_timestamp() must look at the rtx queue (Paolo Abeni) [RHEL-152718]
  - tcp: fix tcp_tso_should_defer() vs large RTT (Paolo Abeni) [RHEL-152718]
  - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat() (Paolo Abeni) [RHEL-152718]
  - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (Paolo Abeni) [RHEL-152718]
  - wireguard: send: append trailer after expanding head (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit (Toke Høiland-Jørgensen) [RHEL-152735] {CVE-2026-31579}
  - wireguard: allowedips: remove redundant space (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: allowedips: Use kfree_rcu() instead of call_rcu() (Toke Høiland-Jørgensen) [RHEL-152735]
  - wireguard: netlink: generate netlink code (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: generate header with ynl-gen (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: move flag enums (CKI Backport Bot) [RHEL-152735]
  - wireguard: uapi: move enum wg_cmd (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: add YNL specification (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: lower .maxattr for WG_CMD_GET_DEVICE (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: convert to split ops (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: use WG_KEY_LEN in policies (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: validate nested arrays in policy (CKI Backport Bot) [RHEL-152735]
  - wireguard: netlink: enable strict genetlink validation (CKI Backport Bot) [RHEL-152735]
  - wireguard: queueing: always return valid online CPU in wg_cpumask_choose_online() (CKI Backport Bot) [RHEL-152735]
  - wireguard: queueing: simplify wg_cpumask_next_online() (CKI Backport Bot) [RHEL-152735]
  - wireguard: peer: Replace sockaddr with sockaddr_inet (CKI Backport Bot) [RHEL-152735]
  - ipv6: Add sockaddr_inet unified address structure (CKI Backport Bot) [RHEL-152735]
  - clocksource/drivers/arm_arch_timer_mmio: Prevent driver unbind (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Get rid of acpi_arch_timer_mem_init() (Mark Langsdorf) [RHEL-156420]
  - clocksource/drivers/arm_arch_timer_mmio: Switch over to standalone driver (Mark Langsdorf) [RHEL-156420]
  - clocksource/drivers/arm_arch_timer: Add standalone MMIO driver (Mark Langsdorf) [RHEL-156420]
  - ACPI: tools: pfrut: fix memory leak and resource leak in pfrut.c (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Correctly number platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420]
  - ACPI: GTDT: Generate platform devices for MMIO timers (Mark Langsdorf) [RHEL-156420]
  - ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Move Lenovo Legion S7 15ACH6 quirk to the right section (Mark Langsdorf) [RHEL-156420]
  - ACPI: RIMT: Add dependency between iommu and devices (Mark Langsdorf) [RHEL-156420]
  - genirq: Fix percpu_devid irq affinity documentation (Mark Langsdorf) [RHEL-156420]
  - drm/amdgpu: Fix ISP segfault issue in kernel v7.0 (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update the format of Arg3 of _DSM (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update the _CPC definition to match ACPI 6.6 (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Save NVS memory on Lenovo G70-35 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (Mark Langsdorf) [RHEL-156420]
  - ACPI: driver: Drop driver_data pointer clearing from two drivers (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Clear driver_data pointer on remove (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Tweak acpi_button_remove() (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Tweak system wakeup handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant checks from acpi_battery_remove() (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Call device_init_wakeup() earlier during probe (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant check from acpi_battery_notify() (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: fix incorrect charging status when current is zero (Mark Langsdorf) [RHEL-156420]
  - hwmon: (acpi_power_meter) Replace deprecated strcpy() with strscpy() (Mark Langsdorf) [RHEL-156420]
  - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use async schedule function in acpi_scan_clear_dep_fn() (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Rework the handling of acpi_processor_ffh_lpi_probe() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_dev() to void (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_states() to void (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Adjust messages regarding postponed ACPI PM (Mark Langsdorf) [RHEL-156420]
  - ACPI: x86: s2idle: Remove dead code in lps0_device_attach() (Mark Langsdorf) [RHEL-156420]
  - x86/acpi: Add acpi=spcr to use SPCR-provided default console (Mark Langsdorf) [RHEL-156420]
  - ACPICA: actbl3.h: ACPI 6.6: SRAT: New flag in Memory Affinity Structure (Mark Langsdorf) [RHEL-156420]
  - ACPICA: actbl2.h: ACPI 6.6: RAS2: Update Parameter Block structure (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPI 6.6: Add _VDM (Voltage Domain) object (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix asltests using the Fatal() opcode (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Add support for the Microsoft display mux _OSI string (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPICA: replace ACPI_FREE() with acpi_ut_delete_object_desc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Clean up after recent changes (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for backlight device objects (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Add debug log for states with invalid entry methods (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (Mark Langsdorf) [RHEL-156420]
  - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Align acpi_device_get_match_data() with driver match order (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Improve ghes_notify_sea() status check (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Extract helper functions for error status handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: GHES: Improve ghes_notify_nmi() status check (Mark Langsdorf) [RHEL-156420]
  - APEI/GHES: ensure that won't go past CPER allocated record (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Add module parameter for LPS0 constraints checking (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Add missing checks to acpi_s2idle_begin_lps0() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Do not expose global variable acpi_idle_driver (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Rearrange declarations in header file (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Redefine two functions as void (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Update cpuidle driver check in __acpi_processor_start() (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: Remove unused empty stubs of some functions (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Optimize ACPI idle driver registration (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: make read-only array non_mmio_desc static const (Mark Langsdorf) [RHEL-156420]
  - ACPI: acpi_watchdog: use LIST_HEAD for stack-allocated list (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: IRQ: Fix INTx GSIs signedness (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Drop outdated comment regarding removed function (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Use resource_type() for resource type checking (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Fix typo under sizeof() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Adjust acpi_osc_handshake() parameter list (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Add device cid attribute for exposing _CID lists (Mark Langsdorf) [RHEL-156420]
  - ACPI: SBS: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: SMBUS HC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Register a platform device for ECDT EC (Mark Langsdorf) [RHEL-156420]
  - ACPI: HED: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Reduce code duplication related to cleanup (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Rework system suspend and resume handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Adjust event notification routine (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for thermal zones (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Do not mark button ACPI devices as wakeup-capable (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Do not bind ACPI drivers to fixed event buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: tiny-power-button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Adjust event notification routines (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Reduce code duplication related to fixed event devices (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Register platform devices for fixed event buttons (Mark Langsdorf) [RHEL-156420]
  - ACPI: NFIT: core: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework the handling of \_SB._OSC USB4 features (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Adjust feature mask creation for \_SB._OSC (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework the handling of \_SB._OSC platform features (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rename label and use ACPI_FREE() in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Split _OSC error processing out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Split _OSC evaluation out of acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Rework printing debug messages on _OSC errors (Mark Langsdorf) [RHEL-156420]
  - ACPI: bus: Fix handling of _OSC errors in acpi_run_osc() (Mark Langsdorf) [RHEL-156420]
  - compiler_types: introduce at_least parameter decoration pseudo keyword (Mark Langsdorf) [RHEL-156420]
  - wifi: iwlwifi: trans: rename at_least variable to min_mode (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Register wakeup sources under physical devices (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCI: PM: Rework root bus notification setup (Mark Langsdorf) [RHEL-156420]
  - ACPI: PNP: Drop acpi_nonpnp_device_ids[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: PNP: Drop PNP0C01 and PNP0C02 from acpi_pnp_device_ids[] (Mark Langsdorf) [RHEL-156420]
  - ACPI: PCC: Fix race condition by removing static qualifier (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Mark Langsdorf) [RHEL-156420]
  - x86/acpi/boot: Correct acpi_is_processor_usable() check again (Mark Langsdorf) [RHEL-156420]
  - acpi: platform_profile - Add max-power profile option (Mark Langsdorf) [RHEL-156420]
  - vmcoreinfo: make hwerr_data visible for debugging (Mark Langsdorf) [RHEL-156420]
  - vmcoreinfo: track and log recoverable hardware errors (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420]
  - ACPI: LPSS: Fix a spelling mistake (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: use min() instead of min_t() (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: Fix EINJV2 initialization and injection (Mark Langsdorf) [RHEL-156420]
  - acpi/hmat: Fix lockdep warning for hmem_register_resource() (Mark Langsdorf) [RHEL-156420]
  - acpi/hmat: Return when generic target is updated (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: MRRM: Fix memory leaks and improve error handling (Mark Langsdorf) [RHEL-156420]
  - ACPI: DPTF: Use ACPI_FREE() for ACPI buffer deallocation (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Drop redundant C-state count checks (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: EC: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156420]
  - ACPI: OSL: replace use of system_wq with system_percpu_wq (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156420]
  - ACPI: SBS: Fix present test in acpi_battery_read() (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Fix typo in a comment (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add support for Microsoft fan extensions (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add hwmon notification support (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add basic notification support (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Check for table version when using precise baudrate (Mark Langsdorf) [RHEL-156420]
  - ACPI: MRRM: Check revision of MRRM table (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Drop redundant locking (Mark Langsdorf) [RHEL-156420]
  - ACPI: irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156420]
  - ACPI: PRM: Add acpi_prm_handler_available() (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Workaround for 64-bit firmware bug (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Use platform device for devres-related actions (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Use ACPI handle when retrieving _FST (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Mark Langsdorf) [RHEL-156420]
  - ACPI: button: Call input_free_device() on failing input device registration (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Make acpi_get_next_subnode() static (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Rework acpi_graph_get_next_endpoint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix argument order in __acpi_node_get_property_reference() (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Only retrieve constraints when needed (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Staticise LPS0 callback functions (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: s2idle: Drop acpi_get_lps0_constraint() (Mark Langsdorf) [RHEL-156420]
  - ACPI: RIMT: Fix unused function warnings when CONFIG_IOMMU_API is disabled (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Return present device nodes only on fwnode interface (Mark Langsdorf) [RHEL-156420]
  - ACPI: CPPC: Do not use CPUFREQ_ETERNAL as an error value (Mark Langsdorf) [RHEL-156420]
  - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay (Mark Langsdorf) [RHEL-156420]
  - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: Remove redundant rcu_read_lock/unlock() under spinlock (Mark Langsdorf) [RHEL-156420]
  - ACPI: battery: Add synchronization between interface updates (Mark Langsdorf) [RHEL-156420]
  - ACPI: support BGRT table on RISC-V (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add RPMI System MSI to GSI mapping (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add support to update gsi range (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Create interrupt controller list in sorted order (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Update honor list for RPMI System MSI (Mark Langsdorf) [RHEL-156420]
  - ACPI: Add support for nargs_prop in acpi_fwnode_get_reference_args() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Refactor acpi_fwnode_get_reference_args() to support nargs_prop (Mark Langsdorf) [RHEL-156420]
  - ACPI: debug: fix signedness issues in read/write helpers (Mark Langsdorf) [RHEL-156420]
  - x86/acpi/cstate: Remove open coded check for cpu_feature_enabled() (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Support Precise Baud Rate field (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Update dsmethod.c to get rid of unused variable warning (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Adjust failure handling in acpi_nondev_subnode_extract() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Do not pass NULL handles to acpi_attach_data() (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Add code comments explaining what is going on (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Disregard references in data-only subnode lists (Mark Langsdorf) [RHEL-156420]
  - ACPI: property: Fix buffer properties extraction for subnodes (Mark Langsdorf) [RHEL-156420]
  - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message (Mark Langsdorf) [RHEL-156420]
  - ACPI: SPCR: Add support for DBG2 RISC-V SBI port subtype (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: EINJ: Allow more types of addresses except MMIO (Mark Langsdorf) [RHEL-156420]
  - ACPI: APEI: Remove redundant assignments in erst_dbg_{ioctl|write}() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Fix largest possible resource descriptor index (Mark Langsdorf) [RHEL-156420]
  - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: ACPI_TYPE_ANY does not include the package type (Mark Langsdorf) [RHEL-156420]
  - ACPICA: acpidump: fix return values in ap_is_valid_checksum() (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Print error messages for too few or too many arguments (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Modify variable definition position (Mark Langsdorf) [RHEL-156420]
  - ACPICA: Allow to skip Global Lock initialization (Mark Langsdorf) [RHEL-156420]
  - ACPICA: iASL: Fix printing CDAT table header (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: thermal: Release policy references using __free() (Mark Langsdorf) [RHEL-156420]
  - ACPI: scan: Add support for RISC-V in acpi_iommu_configure_id() (Mark Langsdorf) [RHEL-156420]
  - ACPI: RISC-V: Add support for RIMT (Mark Langsdorf) [RHEL-156420]
  - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Fold two simple functions into their only caller (Mark Langsdorf) [RHEL-156420]
  - ACPI: fan: Add fan speed reporting for fans with only _FST (Mark Langsdorf) [RHEL-156420]
  - ACPI: thermal: Get rid of a dummy local variable (Mark Langsdorf) [RHEL-156420]
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Mark Langsdorf) [RHEL-156420]
  - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Eliminate static variable flat_state_cnt (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Add module import namespace (Mark Langsdorf) [RHEL-156420]
  - ACPI: Use str_low_high() helper in two places (Mark Langsdorf) [RHEL-156420]
  - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object (Mark Langsdorf) [RHEL-156420]
  - ACPI: video: force native for Lenovo 82K8 (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add HP EliteBook 855 G7 WWAN modem power resource quirk (Mark Langsdorf) [RHEL-156420]
  - ACPI: PM: Add power resource init function (Mark Langsdorf) [RHEL-156420]
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Mark Langsdorf) [RHEL-156420]
  - irqdomain: Add firmware info reporting interface (Mark Langsdorf) [RHEL-156420]
  - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: Avoid division by zero (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Jared Kangas) [RHEL-156761]
  - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Jared Kangas) [RHEL-156761]
  - iio: buffer: Fix wait_queue not being removed (Jared Kangas) [RHEL-156761]
  - iio: buffer: buffer_impl.h: fix kernel-doc warnings (Jared Kangas) [RHEL-156761]
  - iio: core: Add cleanup.h support for iio_device_claim_*() (Jared Kangas) [RHEL-156761]
  - iio: core: Refactor iio_device_claim_direct() implementation (Jared Kangas) [RHEL-156761]
  - iio: core: Add and export __iio_dev_mode_lock() (Jared Kangas) [RHEL-156761]
  - iio: core: Constify struct configfs_item_operations and configfs_group_operations (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: Fix coding style complains (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: Use the cleanup.h API (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Fix coding style complains (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Turn iio_dma_buffer_init() void (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Use the cleanup.h API (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Use lockdep for locking annotations (Jared Kangas) [RHEL-156761]
  - iio: core: add separate lockdep class for info_exist_lock (Jared Kangas) [RHEL-156761]
  - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Jared Kangas) [RHEL-156761]
  - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Jared Kangas) [RHEL-156761]
  - iio: buffer: use dma_buf_unmap_attachment_unlocked() helper (Jared Kangas) [RHEL-156761]
  - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Jared Kangas) [RHEL-156761]
  - iio: core: Clean up device correctly on iio_device_alloc() failure (Jared Kangas) [RHEL-156761]
  - iio: core: add missing mutex_destroy in iio_dev_release() (Jared Kangas) [RHEL-156761]
  - iio: backend: fix kernel-doc to avoid warnings and ensure consistency (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: enable .get_dma_dev() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: support getting the DMA channel (Jared Kangas) [RHEL-156761]
  - iio: buffer: support getting dma channel from the buffer (Jared Kangas) [RHEL-156761]
  - iio: buffer: document that buffer callback must be context safe (Jared Kangas) [RHEL-156761]
  - iio: buffer: document store_to() callback may be called in any context (Jared Kangas) [RHEL-156761]
  - iio: buffer: document iio_push_to_buffers() calling context (Jared Kangas) [RHEL-156761]
  - iio: buffer: iio_push_to_buffers_with_ts_unaligned() might_sleep() (Jared Kangas) [RHEL-156761]
  - iio: buffer: document iio_push_to_buffers_with_ts_unaligned() may sleep (Jared Kangas) [RHEL-156761]
  - iio: add IIO_ALTCURRENT channel type (Jared Kangas) [RHEL-156761]
  - iio: core: switch info_mask fields to unsigned long to match find_bit helpers (Jared Kangas) [RHEL-156761]
  - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Jared Kangas) [RHEL-156761]
  - iio: buffer: buffer-cb: drop double initialization of demux list (Jared Kangas) [RHEL-156761]
  - iio: fix iio_push_to_buffers_with_ts() typo (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-lptimer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-timer: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: adc: stm32-dfsdm: Fix build warnings about export.h (Jared Kangas) [RHEL-156761]
  - iio: core: add ADC delay calibration definition (Jared Kangas) [RHEL-156761]
  - iio: buffer: Fix checkpatch.pl warning (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for number of lanes (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data alignment (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for filter config (Jared Kangas) [RHEL-156761]
  - iio: fix potential out-of-bound write (Jared Kangas) [RHEL-156761]
  - iio: backend: fix out-of-bound write (Jared Kangas) [RHEL-156761]
  - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Jared Kangas) [RHEL-156761]
  - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data source get (Jared Kangas) [RHEL-156761]
  - iio: Adjust internals of handling of direct mode claiming to suit new API. (Jared Kangas) [RHEL-156761]
  - iio: core: Add support for writing 64 bit attrs (Jared Kangas) [RHEL-156761]
  - MAINTAINERS: Add IIO ADC helpers (Jared Kangas) [RHEL-156761]
  - iio: adc: add helpers for parsing ADC nodes (Jared Kangas) [RHEL-156761]
  - iio: buffer-dma: Fix docstrings (Jared Kangas) [RHEL-156761]
  - iio: core: make use of simple_write_to_buffer() (Jared Kangas) [RHEL-156761]
  - iio: backend: make sure to NULL terminate stack buffer (Jared Kangas) [RHEL-156761]
  - iio: backend: add API for oversampling (Jared Kangas) [RHEL-156761]
  - iio: backend: add support for data size set (Jared Kangas) [RHEL-156761]
  - iio: backend: add API for interface get (Jared Kangas) [RHEL-156761]
  - iio: core: Rework claim and release of direct mode to work with sparse. (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: add devm_iio_dmaengine_buffer_setup_with_handle() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: split requesting DMA channel from allocating buffer (Jared Kangas) [RHEL-156761]
  - iio: gts-helper: export iio_gts_get_total_gain() (Jared Kangas) [RHEL-156761]
  - iio: introduce the FAULT event type (Jared Kangas) [RHEL-156761]
  - iio: gts-helper: add helpers to ease searches of gain_sel and new_gain (Jared Kangas) [RHEL-156761]
  - iio: gts: Simplify available scale table build (Jared Kangas) [RHEL-156761]
  - iio: consumers: ensure read buffers for labels and ext_info are page aligned (Jared Kangas) [RHEL-156761]
  - iio: core: fix doc reference to iio_push_to_buffers_with_ts_unaligned (Jared Kangas) [RHEL-156761]
  - iio: trigger: stm32-timer-trigger: Add check for clk_enable() (Jared Kangas) [RHEL-156761]
  - iio: buffer-dmaengine: document iio_dmaengine_buffer_setup_ext (Jared Kangas) [RHEL-156761]
  - iio: Move __private marking before struct element priv in struct iio_dev (Jared Kangas) [RHEL-156761]
  - iio: events: make IIO_EVENT_CODE macro private (Jared Kangas) [RHEL-156761]
  - iio: Mark iio_dev::priv member with __private (Jared Kangas) [RHEL-156761]
  - iio: Add channel type for attention (Jared Kangas) [RHEL-156761]
  - iio: gts: fix infinite loop for gain_to_scaletables() (Jared Kangas) [RHEL-156761]
  - iio: gts: Fix uninitialized symbol 'ret' (Jared Kangas) [RHEL-156761]
  - iio: backend: extend features (Jared Kangas) [RHEL-156761]
  - iio: events.h: add event identifier macros for differential channel (Jared Kangas) [RHEL-156761]
  - iio: backend: fix wrong pointer passed to IS_ERR() (Jared Kangas) [RHEL-156761]
  - iio: Convert unsigned to unsigned int (Jared Kangas) [RHEL-156761]
  - iio: adc: Convert to IIO_MAP() (Jared Kangas) [RHEL-156761]
  - iio: adc: Constify struct iio_map (Jared Kangas) [RHEL-156761]
  - netdev: add io_uring memory provider info (Davide Caratti) [RHEL-141853]
  - net: add helpers for setting a memory provider on an rx queue (Davide Caratti) [RHEL-141853]
  - net: page_pool: add memory provider helpers (Davide Caratti) [RHEL-141853]
  - net: prepare for non devmem TCP memory providers (Davide Caratti) [RHEL-141853]
  - net: page_pool: add a mp hook to unregister_netdevice* (Davide Caratti) [RHEL-141853]
  - net: page_pool: add callback for mp info printing (Davide Caratti) [RHEL-141853]
  - net: page_pool: create hooks for custom memory providers (Davide Caratti) [RHEL-141853]
  - net: generalise net_iov chunk owners (Davide Caratti) [RHEL-141853]
  - net: prefix devmem specific helpers (Davide Caratti) [RHEL-141853]
  - net: page_pool: don't cast mp param to devmem (Davide Caratti) [RHEL-141853]
  - selftests: drv-net-hw: inject pp_alloc_fail errors in the right place (Davide Caratti) [RHEL-141853]
  - net: page_pool: rename page_pool_is_last_ref() (Davide Caratti) [RHEL-141853]
  - net: page_pool: do not count normal frag allocation in stats (Davide Caratti) [RHEL-141853]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-240.el10]
changelog:
  - s390/syscalls: Add spectre boundary for syscall dispatch table (Ramesh Chhetri) [RHEL-183314]
  - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179565] {CVE-2026-45998}
  - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179565] {CVE-2026-45998}
  - x86/mce, EDAC/mce_amd: Add new SMCA bank types (Steve Best) [RHEL-100951]
  - x86/mce, EDAC/mce_amd: Update CS bank type naming (Steve Best) [RHEL-100951]
  - x86/mce, EDAC/mce_amd: Reorder SMCA bank type enums (Steve Best) [RHEL-100951]
  - tools/power turbostat: v2026.04.21 (Steve Best) [RHEL-172176]
  - tools/power turbostat: Process HT siblings in CPU order (Steve Best) [RHEL-172176]
  - tools/power turbostat: Show module_id column (Steve Best) [RHEL-172176]
  - tools/power turbostat: Print core_id and apic_id in hex (Steve Best) [RHEL-172176]
  - tools/power turbostat: Cleanup print helper functions (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix --cpu-set 1 regression on HT systems (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix --cpu-set 0 regression on HT systems (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix unrecognized option '-P' (Steve Best) [RHEL-172176]
  - tools/power turbostat: Fix AMD RAPL regression on big systems (Steve Best) [RHEL-172176]
  - vfio: replace vfio->device_class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Clean up DMABUFs before disabling function (Cédric Le Goater) [RHEL-149504]
  - vfio: remove dead notifier code (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Require vfio_device_ops.name (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Rename vfio_config_do_rw() to vfio_pci_config_rw_single() and export it (Cédric Le Goater) [RHEL-149504]
  - vfio: unhide vdev->debug_root (Cédric Le Goater) [RHEL-149504]
  - drivers/vfio_pci_core: Change PXD_ORDER check from switch case to if/else block (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Fix double free in dma-buf feature (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Support DMR and GNR-D DSA devices (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Build tests on aarch64 (Cédric Le Goater) [RHEL-149504]
  - vfio/mlx5: Add REINIT support to VFIO_MIG_GET_PRECOPY_INFO (Cédric Le Goater) [RHEL-149504]
  - vfio/mlx5: consider inflight SAVE during PRE_COPY (Cédric Le Goater) [RHEL-149504]
  - net/mlx5: Add IFC bits for migration state (Cédric Le Goater) [RHEL-149504]
  - vfio: Adapt drivers to use the core helper vfio_check_precopy_ioctl (Cédric Le Goater) [RHEL-149504]
  - vfio: Add support for VFIO_DEVICE_FEATURE_MIG_PRECOPY_INFOv2 (Cédric Le Goater) [RHEL-149504]
  - vfio: Define uAPI for re-init initial bytes during the PRE_COPY phase (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Fix VLA initialisation in vfio_pci_irq_set() (Cédric Le Goater) [RHEL-149504]
  - vfio: uapi: fix comment typo (Cédric Le Goater) [RHEL-149504]
  - vfio: mdev: replace mtty_dev->vd_class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio: replace vfio->class with a const struct class (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: fix crash in vfio_dma_mapping_mmio_test (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: only build tests on arm64 and x86_64 (Cédric Le Goater) [RHEL-149504]
  - vfio/pci: Lock upstream bridge for vfio_pci_core_disable() (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Drop IOMMU mapping size assertions for VFIO_TYPE1_IOMMU (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Add vfio_dma_mapping_mmio_test (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Align BAR mmaps for efficient IOMMU mapping (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Centralize IOMMU mode name definitions (Cédric Le Goater) [RHEL-149504]
  - vfio/mdev: update outdated comment (Cédric Le Goater) [RHEL-149504]
  - vfio: selftests: Drop <uapi/linux/types.h> includes (Cédric Le Goater) [RHEL-149504]
  - platform/x86/intel/vsec: Add Nova Lake PUNIT support (Steve Best) [RHEL-95636]
  - platform/x86/intel/vsec: Add support for Wildcat Lake (Steve Best) [RHEL-95636]
  - platform/x86/intel/pmt/discovery: use valid device pointer in dev_err_probe (Steve Best) [RHEL-133094]
  - platform/x86/intel/pmt: Fix kobject memory leak on init failure (Steve Best) [RHEL-133094]
  - platform/x86: intel/pmt: Replace sprintf() with sysfs_emit() (Steve Best) [RHEL-133094]
  - nvmet-fcloop: Check remoteport port_state before calling done callback (Aristeu Rozanski) [RHEL-74463]
  - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free (Aristeu Rozanski) [RHEL-146153]
  - Disable TPM as hwrng source on aarch64 (Štěpán Horáček) [RHEL-69440]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-241.el10]
changelog:
  - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185115]
  - s390: Revert support for DCACHE_WORD_ACCESS (Rafael Aquini) [RHEL-184095]
  - redhat/configs: Add CONFIG_DIBS configuration option (Mircea Dragan) [RHEL-136142]
  - net/smc: fix missing sk_err when TCP handshake fails (Mircea Dragan) [RHEL-136142]
  - net/smc: avoid early lgr access in smc_clc_wait_msg (Mircea Dragan) [RHEL-136142]
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Mircea Dragan) [RHEL-136142]
  - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Mircea Dragan) [RHEL-136142]
  - dibs: change dibs_class to a const struct (Mircea Dragan) [RHEL-136142]
  - Revert 'net/smc: Introduce TCP ULP support' (Mircea Dragan) [RHEL-136142]
  - dibs: Remove KMSG_COMPONENT macro (Mircea Dragan) [RHEL-136142]
  - net/smc: fix mismatch between CLC header and proposal (Mircea Dragan) [RHEL-136142]
  - net/smc: handle -ENOMEM from smc_wr_alloc_link_mem gracefully (Mircea Dragan) [RHEL-136142]
  - net/smc: make wr buffer count configurable (Mircea Dragan) [RHEL-136142]
  - dibs: Use subsys_initcall() (Mircea Dragan) [RHEL-136142]
  - dibs: Remove reset of static vars in dibs_init() (Mircea Dragan) [RHEL-136142]
  - smc: rename smc_find_ism_store_rc to reflect broader usage (Mircea Dragan) [RHEL-136142]
  - net/smc: fix general protection fault in __smc_diag_dump (Mircea Dragan) [RHEL-136142]
  - dibs: Check correct variable in dibs_init() (Mircea Dragan) [RHEL-136142]
  - dibs: Move event handling to dibs layer (Mircea Dragan) [RHEL-136142]
  - dibs: Move data path to dibs layer (Mircea Dragan) [RHEL-136142]
  - dibs: Move query_remote_gid() to dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Move vlan support to dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Local gid for dibs devices (Mircea Dragan) [RHEL-136142]
  - dibs: Create class dibs (Mircea Dragan) [RHEL-136142]
  - dibs: Move struct device to dibs_dev (Mircea Dragan) [RHEL-136142]
  - dibs: Define dibs_client_ops and dibs_dev_ops (Mircea Dragan) [RHEL-136142]
  - dibs: Define dibs loopback (Mircea Dragan) [RHEL-136142]
  - dibs: Register ism as dibs device (Mircea Dragan) [RHEL-136142]
  - dibs: Register smc as dibs_client (Mircea Dragan) [RHEL-136142]
  - dibs: Create drivers/dibs (Mircea Dragan) [RHEL-136142]
  - net/smc: Decouple sf and attached send_buf in smc_loopback (Mircea Dragan) [RHEL-136142]
  - net/smc: Remove error handling of unregister_dmb() (Mircea Dragan) [RHEL-136142]
  - net/smc: fix warning in smc_rx_splice() when calling get_page() (Mircea Dragan) [RHEL-136142]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk(). (Mircea Dragan) [RHEL-136142]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). (Mircea Dragan) [RHEL-136142]
  - net/smc: Remove unused argument from 2 SMC functions (Mircea Dragan) [RHEL-136142]
  - net/smc: Improve log message for devices w/o pnetid (Mircea Dragan) [RHEL-136142]
  - net/smc: Replace use of strncpy on NUL-terminated string with strscpy (Mircea Dragan) [RHEL-136142]
  - net: Introduce netif_xmit_timeout_ms() helper (CKI Backport Bot) [RHEL-180966]
  - queue_api: add subqueue variant netif_subqueue_sent (CKI Backport Bot) [RHEL-180966]
  - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180107] {CVE-2026-46135}
  - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179772] {CVE-2026-43330}
  - Add epoch support for rv and rv-debuginfo packages (John Kacur) [RHEL-163488]
  - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (CKI Backport Bot) [RHEL-170798] {CVE-2026-23401}
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (CKI Backport Bot) [RHEL-170798] {CVE-2026-23401}
  - dm vdo: use GFP_NOIO for blkdev_issue_zeroout on format path (Benjamin Marzinski) [RHEL-113137]
  - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169623]
  - dm cache: fix missing return in invalidate_committed's error path (Benjamin Marzinski) [RHEL-92782]
  - dm vdo: save the formatted metadata to disk (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add formatting logic and initialization (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add synchronous metadata I/O submission helper (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block structure (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block encoding (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add upfront validation for logical size (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add formatting parameters to table line (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add super block initialization to encodings.c (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add geometry block initialization to encodings.c (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: add __counted_by attribute to a number of structures (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: remove redundant TYPE argument from vdo_allocate macro (Benjamin Marzinski) [RHEL-113137]
  - dm vdo: update vdo_allocate_extended to take a field name, no types (Benjamin Marzinski) [RHEL-113137]
  - dm vdo slab-depot: validate old zone count on load (Benjamin Marzinski) [RHEL-113137]
  - dm vdo indexer: validate saved zone count (Benjamin Marzinski) [RHEL-113137]
  - dm cache metadata: fix memory leak on metadata abort retry (Benjamin Marzinski) [RHEL-155190]
  - dm cache: prevent entering passthrough mode after unclean shutdown (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix dirty mapping checking in passthrough mode switching (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix concurrent write failure in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache policy smq: fix missing locks in invalidating cache blocks (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix write hang in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix write path cache coherency in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - dm cache: fix null-deref with concurrent writes in passthrough mode (Benjamin Marzinski) [RHEL-92782]
  - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-168103] {CVE-2024-56603}
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-166731] {CVE-2025-39766}
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-166731] {CVE-2025-39766}
  - dm-verity-fec: fix corrected block count stat (Benjamin Marzinski) [RHEL-154975]
  - dm-mpath: don't stop probing paths at presuspend (Benjamin Marzinski) [RHEL-148451]
  - dm mpath: make pg_init_delay_msecs settable (Benjamin Marzinski) [RHEL-154975]
  - dm: use bio_clone_blkg_association (Benjamin Marzinski) [RHEL-154975]
  - dm-unstripe: fix mapping bug when there are multiple targets in a table (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: fix recalculation in bitmap mode (Benjamin Marzinski) [RHEL-144458]
  - dm: clear cloned request bio pointer when last clone bio completes (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: fix a typo in the code for write/discard race (Benjamin Marzinski) [RHEL-154975]
  - dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-154975]
  - dm: replace -EEXIST with -EBUSY (Benjamin Marzinski) [RHEL-154975]
  - dm: remove fake timeout to avoid leak request (Benjamin Marzinski) [RHEL-154975]
  - dm pcache: fix segment info indexing (Benjamin Marzinski) [RHEL-154975]
  - dm pcache: fix cache info indexing (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: advance slot index before writing slot (Benjamin Marzinski) [RHEL-154975]
  - dm raid: add documentation for takeover/reshape raid1 -> raid5 table line examples (Benjamin Marzinski) [RHEL-154975]
  - dm: ignore discard return value (Benjamin Marzinski) [RHEL-154975]
  - MAINTAINERS: add Benjamin Marzinski as a device mapper maintainer (Benjamin Marzinski) [RHEL-154975]
  - dm-mpath: Simplify the setup_scsi_dh code (Benjamin Marzinski) [RHEL-154975]
  - dm vdo: fix kerneldoc warnings (Benjamin Marzinski) [RHEL-154975]
  - dm-bufio: align write boundary on physical block size (Benjamin Marzinski) [RHEL-154975]
  - dm-crypt: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-136802]
  - dm: test for REQ_ATOMIC in dm_accept_partial_bio() (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: remove useless mempool (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: disable recursive forward error correction (Benjamin Marzinski) [RHEL-127492] {CVE-2025-71161}
  - dm-ebs: Mark full buffer dirty even on partial write (Benjamin Marzinski) [RHEL-154975]
  - dm mpath: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-154975]
  - dm verity fec: Expose corrected block count via status (Benjamin Marzinski) [RHEL-154975]
  - dm: Don't warn if IMA_DISABLE_HTABLE is not enabled (Benjamin Marzinski) [RHEL-154975]
  - dm-verity: remove log message with shash driver name (Benjamin Marzinski) [RHEL-154975]
  - dm: sysfs: use sysfs_emit() in dm-sysfs.c (Benjamin Marzinski) [RHEL-154975]
  - dm: remove useless md->nr_zones variable (Benjamin Marzinski) [RHEL-154975]
  - dm-crypt: use folio_nr_pages() instead of shift operation (Benjamin Marzinski) [RHEL-136802]
  - dm: fix failure when empty flush's bi_sector points beyond the device end (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: zero cache_info before default init (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: reuse meta_addr in pcache_meta_find_latest (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: allow built-in build and rename flush helper (Benjamin Marzinski) [RHEL-154975]
  - dm raid: use proper md_ro_state enumerators (Benjamin Marzinski) [RHEL-154975]
  - dm-integrity: prefer synchronous hash interface (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: enable asynchronous hash interface (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: rename internal_hash (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: add the "offset" argument (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: allocate the recalculate buffer with kmalloc (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: introduce integrity_kmap and integrity_kunmap (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: replace bvec_kmap_local with kmap_local_page (Benjamin Marzinski) [RHEL-136802]
  - dm-integrity: use internal variable for digestsize (Benjamin Marzinski) [RHEL-136802]
  - dm vdo: Update code to use mem_is_zero (Benjamin Marzinski) [RHEL-154975]
  - dm: optimize REQ_PREFLUSH with data when using the linear target (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: use int type to store negative error codes (Benjamin Marzinski) [RHEL-154975]
  - dm: fix "writen"->"written" (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: cleanup: fix coding style report by checkpatch.pl (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: remove ctrl_lock for pcache_cache_segment (Benjamin Marzinski) [RHEL-154975]
  - redhat/configs: Add CONFIG_DM_PCACHE (Benjamin Marzinski) [RHEL-154975]
  - dm-pcache: add persistent cache target in device-mapper (Benjamin Marzinski) [RHEL-154975]
  - dm error: mark as DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-154975]
  - dm-vdo: Promote dm-vdo title to title heading (Benjamin Marzinski) [RHEL-154975]
  - docs: device-mapper: fixed spelling mistakes in documentation (Benjamin Marzinski) [RHEL-154975]
  - dm bufio: remove redundant __GFP_NOWARN (Benjamin Marzinski) [RHEL-154975]
  - dm-ima: drop a useless argument (Benjamin Marzinski) [RHEL-154975]
  - dm: use vmalloc_array() to simplify code (Benjamin Marzinski) [RHEL-154975]
  - dm-ima: more strlen() drops (Benjamin Marzinski) [RHEL-154975]
  - docs: device-mapper: fix typos in delay.rst and vdo-design.rst (Benjamin Marzinski) [RHEL-154975]
  - RDMA/bnxt_re: fix dma_free_coherent() pointer (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to use correct page size for PDE table (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats() (Sreekanth Reddy) [RHEL-135357] {CVE-2025-71092}
  - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Pass correct flag for dma mr creation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix the inline size for GenP7 devices (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix wrong check for CQ coalesc support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add a debugfs entry for CQE coalescing tuning (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix a potential memory leak in destroy_gsi_sqp (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: improve clarity in ALLOC_PAGE handler (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Remove non-statistics counters from hw_counters (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add debugfs info entry for device and resource information (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix incorrect errno used in function comments (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Avoid GID level QoS update from the driver (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Update sysfs entries with appropriate data (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Call strscpy() with correct size argument (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Remove unnecessary condition checks (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Use firmware provided message timeout value (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Initialize fw with roce_mirror support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for flow create/destroy (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for mirror vnic (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add support for unique GID (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Refactor stats context memory allocation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Refactor hw context memory allocation (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Add data structures for RoCE mirror support (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Enhance a log message when bnxt_re_register_netdev fails (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Delete always true SGID table check (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Report udp source port for flow_label in bnxt_re_query_qp (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: RoCE related hardware counters update (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Optimize bnxt_qplib_get_dev_attr function (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: RoCE Driver Dynamic Debug for HWRM's (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Show srq_limit in fill_res_srq_entry hook (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to initialize the PBL array (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix a possible memory leak in the driver (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to remove workload check in SRQ limit path (Sreekanth Reddy) [RHEL-135357]
  - RDMA/bnxt_re: Fix to do SRQ armena by default (Sreekanth Reddy) [RHEL-135357]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-242.el10]
changelog:
  - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179758] {CVE-2026-43414}
  - sched/fair: Fix wakeup_preempt_fair() for not waking up task (Phil Auld) [RHEL-174703]
  - sched/fair: Fix overflow in vruntime_eligible() (Phil Auld) [RHEL-174703]
  - sched/fair: Clear rel_deadline when initializing forked entities (Phil Auld) [RHEL-174703]
  - sched/fair: Fix wakeup_preempt_fair() vs delayed dequeue (Phil Auld) [RHEL-174703]
  - sched/deadline: Use revised wakeup rule for dl_server (Phil Auld) [RHEL-174703]
  - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() (Phil Auld) [RHEL-174703]
  - sched/debug: Fix avg_vruntime() usage (Phil Auld) [RHEL-174703]
  - sched/fair: Fix zero_vruntime tracking fix (Phil Auld) [RHEL-174703] {CVE-2026-43323}
  - NFS: write_completion: dereference loop-local req, not hdr->req (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Report whether fh_key was actually updated (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: prevent out-of-bounds read in __cache_seq_start() (Olga Kornievskaia) [RHEL-171581]
  - xfs: fix overlapping extents returned for pNFS LAYOUTGET (Olga Kornievskaia) [RHEL-171581]
  - xfs: fix use of uninitialized imap in xfs_fs_map_blocks error path (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Fix infinite loop in layout state revocation (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: start cache request seqno at 1 to fix netlink GET_REQS (Olga Kornievskaia) [RHEL-171581]
  - nfsd: update mtime/ctime on COPY in presence of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: update mtime/ctime on CLONE in presense of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix file change detection in CB_GETATTR (Olga Kornievskaia) [RHEL-171581]
  - net/handshake: Add new parameter 'HANDSHAKE_A_ACCEPT_KEYRING' (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix RCU dereference of cl_xprt in nfs_compare_super_address (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove redundant __private attribute from nfs_page_class (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.2: fix CLONE/COPY attrs in presence of delegated attributes (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix writeback in presence of errors (Olga Kornievskaia) [RHEL-171581]
  - nfs: use memcpy_and_pad in decode_fh (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.1: Apply session size limits on clone path (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: retry GETATTR if GET_DIR_DELEGATION failed (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix RENAME attr in presence of directory delegations (Olga Kornievskaia) [RHEL-171581]
  - pnfs/flexfiles: validate ds_versions_cnt is non-zero (Olga Kornievskaia) [RHEL-171581]
  - NFS/blocklayout: print each device used for SCSI layouts (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Post receive buffers after RPC completion (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Scale receive batch size with credit window (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Replace rpcrdma_mr_seg with xdr_buf cursor (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Decouple frwr_wp_create from frwr_map (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Avoid 250 ms delay on backlog wakeup (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Close sendctx get/put race that can block a transport (Olga Kornievskaia) [RHEL-171581]
  - nfs: update inode ctime after removexattr operation (Olga Kornievskaia) [RHEL-171581]
  - nfs: fix utimensat() for atime with delegated timestamps (Olga Kornievskaia) [RHEL-171581]
  - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-171581]
  - NFSv4/pnfs: If the server is down, retry the layout returns on reboot (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix comment typo in nfsxdr (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix comment typo in nfs3xdr (Olga Kornievskaia) [RHEL-171581]
  - NFSD: convert callback RPC program to per-net namespace (Olga Kornievskaia) [RHEL-171581]
  - NFSD: use per-operation statidx for callback procedures (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Use contiguous pages for RDMA Read sink buffers (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Add svc_rqst_page_release() helper (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: xdr.h: fix all kernel-doc warnings (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Factor out WR chain linking into helper (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Add Write chunk WRs to the RPC's Send WR chain (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Clean up use of rdma->sc_pd->device (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Clean up use of rdma->sc_pd->device in Receive paths (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Add fair queuing for Send Queue access (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Optimize rq_respages allocation in svc_alloc_arg (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Track consumed rq_pages entries (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Handle NULL entries in svc_rqst_release_pages (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Allocate a separate Reply page array (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Tighten bounds checking in svc_rqst_replace_page (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Sign filehandles (Olga Kornievskaia) [RHEL-171581]
  - NFSD/export: Add sign_fh export option (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a key for signing filehandles (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use dynamic allocation for oversized NFSv4.0 replay cache (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split cache_detail queue into request and reader lists (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: convert queue_wait from global to per-cache-detail waitqueue (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: convert queue_lock from global spinlock to per-cache-detail lock (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Add XPT flags missing from SVC_XPRT_FLAG_LIST (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove dead code from fs/lockd/xdr4.c (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove C macros that are no longer used (Olga Kornievskaia) [RHEL-171581]
  - lockd: Add LOCKD_SHARE_SVID constant for DOS sharing mode (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 FREE_ALL procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 NM_LOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNSHARE procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 SHARE procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Prepare share helpers for xdrgen conversion (Olga Kornievskaia) [RHEL-171581]
  - lockd: Hoist file_lock init out of nlm4svc_decode_shareargs() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Convert server-side undefined procedures to xdrgen (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 SM_NOTIFY procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST_RES procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST_MSG procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Refactor nlm4svc_callback() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 GRANTED procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 UNLOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 CANCEL procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 LOCK procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 TEST procedure (Olga Kornievskaia) [RHEL-171581]
  - lockd: Use xdrgen XDR functions for the NLMv4 NULL procedure (Olga Kornievskaia) [RHEL-171581]
  - Documentation: Add the RPC language description of NLM version 4 (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Enforce timeout on layout recall and integrate lease manager fencing (Olga Kornievskaia) [RHEL-171581]
  - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Fix compilation error (`make W=1`) when dprintk() is no-op (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: Kill RPC_IFDEBUG() (Olga Kornievskaia) [RHEL-171581]
  - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate svc_version definitions to XDR layer (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move nlm4svc_set_file_lock_range() (Olga Kornievskaia) [RHEL-171581]
  - lockd: Make linux/lockd/nlm.h an internal header (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move xdr.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - lockd: Remove lockd/debug.h (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate include/linux/lockd/lockd.h (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move share.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - lockd: Move xdr4.h from include/linux/lockd/ to fs/lockd/ (Olga Kornievskaia) [RHEL-171581]
  - NFS: Use nlmclnt_shutdown_rpc_clnt() to safely shut down NLM (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate nlmsvc_unlock API declarations (Olga Kornievskaia) [RHEL-171581]
  - lockd: Have nlm_fopen() return errno values (Olga Kornievskaia) [RHEL-171581]
  - lockd: Introduce nlm__int__deadlock (Olga Kornievskaia) [RHEL-171581]
  - lockd: Relocate and rename nlm_drop_reply (Olga Kornievskaia) [RHEL-171581]
  - lockd: Simplify cast_status() in svcproc.c (Olga Kornievskaia) [RHEL-171581]
  - nfsd: remove NFSD_V4_DELEG_TIMESTAMPS Kconfig option (Olga Kornievskaia) [RHEL-171581]
  - nfsd: add a runtime switch for disabling delegated timestamps (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Replace KUnit tests for memcmp() with KUNIT_EXPECT_MEMEQ_MSG() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Track SCSI Persistent Registration Fencing per Client with xarray (Olga Kornievskaia) [RHEL-171581]
  - sunrpc/cache: improve RCU safety in cache_list walking. (Olga Kornievskaia) [RHEL-171581]
  - nfsd/sunrpc: move rq_cachetype into struct nfsd_thread_local_info (Olga Kornievskaia) [RHEL-171581]
  - nfsd/sunrpc: add svc_rqst->rq_private pointer and remove rq_lease_breaker (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: fix cache_request leak in cache_release (Olga Kornievskaia) [RHEL-171581] {CVE-2026-31400}
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (Olga Kornievskaia) [RHEL-171581] {CVE-2026-31403}
  - nfsd: switch purge_old() to use start_removing_noperm() (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix NFS KConfig typos (Olga Kornievskaia) [RHEL-171581]
  - xprtrdma: Decrement re_receiving on the early exit paths (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43469}
  - nfsd: report the requested maximum number of threads instead of number running (Olga Kornievskaia) [RHEL-171581]
  - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43470}
  - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). (Olga Kornievskaia) [RHEL-171581] {CVE-2026-43394}
  - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). (Olga Kornievskaia) [RHEL-171581] {CVE-2026-23297}
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (Olga Kornievskaia) [RHEL-171581]
  - nfs: nfs4proc: Convert comma to semicolon (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Change list definition method (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: rpc_debug and others are defined even if CONFIG_SUNRPC_DEBUG unset (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: limit lease period in nfs4_set_lease_period() (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: pass lease period in seconds to nfs4_set_lease_period() (Olga Kornievskaia) [RHEL-171581]
  - fs/nfs: Fix readdir slow-start regression (Olga Kornievskaia) [RHEL-171581]
  - NFS: fix delayed delegation return handling (Olga Kornievskaia) [RHEL-171581]
  - NFS: simplify error handling in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: fold nfs_abort_delegation_return into nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove the delegation == NULL check in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: use bool for the issync argument to nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: return void from ->return_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: return void from nfs4_inode_make_writeable (Olga Kornievskaia) [RHEL-171581]
  - NFS: Merge CONFIG_NFS_V4_1 with CONFIG_NFS_V4 (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add a way to disable NFS v4.0 via KConfig (Olga Kornievskaia) [RHEL-171581]
  - redhat/configs: Add NFS_V4_0 (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move sequence slot operations into minorversion operations (Olga Kornievskaia) [RHEL-171581]
  - NFS: Pass a struct nfs_client to nfs4_init_sequence() (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move NFS v4.0 pathdown recovery into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_init_client into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_shutdown_client into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Make the various NFS v4.0 operations static again (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move the NFS v4.0 minor version ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_mig_recovery_ops to nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_state_renewal_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_nograce_recovery_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Split out the nfs40_reboot_recovery_ops into nfs40client.c (Olga Kornievskaia) [RHEL-171581]
  - NFS: Move nfs40_call_sync_ops into nfs40proc.c (Olga Kornievskaia) [RHEL-171581]
  - exportfs: clarify the documentation of open()/permission() expotrfs ops (Olga Kornievskaia) [RHEL-171581]
  - nfsd: do not allow exporting of special kernel filesystems (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add POSIX ACL file attributes to SUPPATTR bitmasks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add POSIX draft ACL support to the NFSv4 SETATTR operation (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add support for POSIX draft ACLs for file creation (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add support for XDR decoding POSIX draft ACLs (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Refactor nfsd_setattr()'s ACL error reporting (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Do not allow NFSv4 (N)VERIFY to check POSIX ACL attributes (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_posix_access_acl (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_posix_default_acl (Olga Kornievskaia) [RHEL-171581]
  - lsm,nfs: fix memory leak of lsm_context (Olga Kornievskaia) [RHEL-171581]
  - lsm: lsm_context in security_dentry_init_security (Olga Kornievskaia) [RHEL-171581]
  - lsm: use lsm_context in security_inode_getsecctx (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_acl_trueform_scope (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add nfsd4_encode_fattr4_acl_trueform (Olga Kornievskaia) [RHEL-171581]
  - Add RPC language definition of NFSv4 POSIX ACL extension (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a Kconfig setting to enable support for NFSv4 POSIX ACLs (Olga Kornievskaia) [RHEL-171581]
  - redhat/configs: Add NFSD_V4_POSIX_ACLS (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Implement pass-through lines in specifications (Olga Kornievskaia) [RHEL-171581]
  - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-171581]
  - nfsd: add controls to set the minimum number of threads per pool (Olga Kornievskaia) [RHEL-171581]
  - nfsd: adjust number of running nfsd threads based on activity (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: allow svc_recv() to return -ETIMEDOUT and -EBUSY (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split new thread creation into a separate function (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: introduce the concept of a minimum number of threads per pool (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: track the max number of requested threads in a pool (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: remove special handling of NULL pool from svc_start/stop_kthreads() (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: split svc_set_num_threads() into two functions (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: use bvec-based RDMA read/write API (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Add enum value validation to generated decoders (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Emit a max_arg_sz macro (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Extend error reporting to AST transformation phase (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Improve parse error reporting (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Remove inclusion of nlm4.h header (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (Olga Kornievskaia) [RHEL-171581]
  - nfsd: fix return error code for nfsd_map_name_to_[ug]id (Olga Kornievskaia) [RHEL-171581]
  - nfsd: never defer requests during idmap lookup (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Initialize data pointer for zero-length items (Olga Kornievskaia) [RHEL-171581]
  - NFSD: fix setting FMODE_NOCMTIME in nfs4_open_delegation (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Implement short (16-bit) integer types (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use workqueue enable/disable APIs for v4_end_grace sync (Olga Kornievskaia) [RHEL-171581]
  - NFS: NFSERR_INVAL is not defined by NFSv2 (Olga Kornievskaia) [RHEL-171581]
  - nfsd: prefix notification in nfsd4_finalize_deleg_timestamps() with "nfsd: " (Olga Kornievskaia) [RHEL-171581]
  - locks: ensure vfs_test_lock() never returns FILE_LOCK_DEFERRED (Olga Kornievskaia) [RHEL-171581]
  - xdrgen: Generate "if" instead of "switch" for boolean union enumerators (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add instructions on how to deal with xdrgen files (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Clean up nfsd4_check_open_attributes() (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: switch nfs_local_do_read and nfs_local_do_write to return void (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: remove -EAGAIN handling in nfs_local_doio() (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: use GFP_NOIO and non-memreclaim workqueue in nfs_local_commit (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: Cleanup the nfs_local_pgio_done() parameters (Olga Kornievskaia) [RHEL-171581]
  - NFS/localio: Handle short writes by retrying (Olga Kornievskaia) [RHEL-171581]
  - NFS: make nfs_mark_return_unreferenced_delegations less aggressive (Olga Kornievskaia) [RHEL-171581]
  - NFS: return delegations from the end of a LRU when over the watermark (Olga Kornievskaia) [RHEL-171581]
  - NFS: add a separate delegation return list (Olga Kornievskaia) [RHEL-171581]
  - NFS: reformat nfs_mark_delegation_revoked (Olga Kornievskaia) [RHEL-171581]
  - NFS: use a local RCU critical section in nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: use refcount_inc_not_zero nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: don't consume a delegation reference in nfs_end_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: take a delegation reference in nfs4_get_valid_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: simplify the detached delegation check in update_open_stateid (Olga Kornievskaia) [RHEL-171581]
  - NFS: move the deleg_cur check out of nfs_detach_delegation_locked (Olga Kornievskaia) [RHEL-171581]
  - NFS: return bool from nfs_detach_delegation{,_locked} (Olga Kornievskaia) [RHEL-171581]
  - NFS: move delegation lookup into can_open_delegated (Olga Kornievskaia) [RHEL-171581]
  - NFS: rewrite nfs_delegations_present in terms of nr_active_delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_free_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: open code nfs_delegation_need_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove NFS_DELEGATION_INODE_FREEING (Olga Kornievskaia) [RHEL-171581]
  - NFS: drop the _locked postfix from nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: assert rcu_read_lock is held in nfs_start_delegation_return_locked (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_start_delegation_return (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_inode_detach_delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove the NULL inode check in nfs4_inode_return_delegation_on_close (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_client_mark_return_all_delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove nfs_client_mark_return_unused_delegation_types (Olga Kornievskaia) [RHEL-171581]
  - NFS: remove __nfs_client_for_each_server (Olga Kornievskaia) [RHEL-171581]
  - exportfs: Mark struct export_operations functions at kernel-doc (Olga Kornievskaia) [RHEL-171581]
  - exportfs: Fix kernel-doc output for get_name() (Olga Kornievskaia) [RHEL-171581]
  - docs: exportfs: Use source code struct documentation (Olga Kornievskaia) [RHEL-171581]
  - NFS: Don't immediately return directory delegations when disabled (Olga Kornievskaia) [RHEL-171581]
  - NFSv4.x: Directory delegations don't require any state recovery (Olga Kornievskaia) [RHEL-171581]
  - nfs: unify security_inode_listsecurity() calls (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Don't free slots prematurely if requesting a directory delegation (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Fix nfs_clear_verifier_delegated() for delegated directories (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix directory delegation verifier checks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: net ref data still needs to be freed even if net hasn't startup (Olga Kornievskaia) [RHEL-171581]
  - nfsd: provide locking for v4_end_grace (Olga Kornievskaia) [RHEL-171581] {CVE-2026-22980}
  - NFSD: Remove NFSERR_EAGAIN (Olga Kornievskaia) [RHEL-171581]
  - nfsd: use ATTR_DELEG in nfsd4_finalize_deleg_timestamps() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: NFSv4 file creation neglects setting ACL (Olga Kornievskaia) [RHEL-171581] {CVE-2025-68803}
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap (Olga Kornievskaia) [RHEL-171581]
  - NFSv4: Handle NFS4ERR_NOTSUPP errors for directory delegations (Olga Kornievskaia) [RHEL-171581]
  - NFSD: nfsd-io-modes: Separate lists (Olga Kornievskaia) [RHEL-171581]
  - NFSD: nfsd-io-modes: Wrap shell snippets in literal code blocks (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add toctree entry for NFSD IO modes docs (Olga Kornievskaia) [RHEL-171581]
  - NFSD: add Documentation/filesystems/nfs/nfsd-io-modes.rst (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Implement NFSD_IO_DIRECT for NFS WRITE (Olga Kornievskaia) [RHEL-171581]
  - NFS: Fix up the automount fs_context to use the correct cred (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add trace point for SCSI fencing operation. (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add a module option to disable directory delegations (Olga Kornievskaia) [RHEL-171581]
  - NFS: Shortcut lookup revalidations if we have a directory delegation (Olga Kornievskaia) [RHEL-171581]
  - NFS: Request a directory delegation during RENAME (Olga Kornievskaia) [RHEL-171581]
  - NFS: Request a directory delegation on ACCESS, CREATE, and UNLINK (Olga Kornievskaia) [RHEL-171581]
  - NFS: Add support for sending GDD_GETATTR (Olga Kornievskaia) [RHEL-171581]
  - nfsd: Use MD5 library instead of crypto_shash (Olga Kornievskaia) [RHEL-171581]
  - nfsd: stop pretending that we cache the SEQUENCE reply. (Olga Kornievskaia) [RHEL-171581]
  - NFS: nfsd-maintainer-entry-profile: Inline function name prefixes (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add a subsystem policy document (Olga Kornievskaia) [RHEL-171581]
  - sunrpc: allocate a separate bvec array for socket sends (Olga Kornievskaia) [RHEL-171581]
  - SUNRPC: Improve "fragment too large" warning (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Implement NFSD_IO_DIRECT for NFS READ (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Relocate the xdr_reserve_space_vec() call site (Olga Kornievskaia) [RHEL-171581]
  - NFSD: pass nfsd_file to nfsd_iter_read() (Olga Kornievskaia) [RHEL-171581]
  - NFSD/blocklayout: Support multiple extents per LAYOUTGET (Olga Kornievskaia) [RHEL-171581]
  - NFSD/blocklayout: Introduce layout content structure (Olga Kornievskaia) [RHEL-171581]
  - svcrdma: Increase the server's default RPC/RDMA credit grant (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Update comment documenting unsupported fattr4 attributes (Olga Kornievskaia) [RHEL-171581]
  - nfsd: delete unreachable confusing code in nfs4_open_delegation() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Add array bounds-checking in nfsd_iter_read() (Olga Kornievskaia) [RHEL-171581]
  - nfsd: switch the default for NFSD_LEGACY_CLIENT_TRACKING to "n" (Olga Kornievskaia) [RHEL-171581]
  - nfsd: change nfs4_client_to_reclaim() to allocate data (Olga Kornievskaia) [RHEL-171581]
  - nfsd: move name lookup out of nfsd4_list_rec_dir() (Olga Kornievskaia) [RHEL-171581]
  - NFSD: Define actions for the new time_deleg FATTR4 attributes (Olga Kornievskaia) [RHEL-171581] {CVE-2025-40326}
  - NFSD: Allow layoutcommit during grace period (Olga Kornievskaia) [RHEL-171581]
  - fs: lift the FMODE_NOCMTIME check into file_update_time_flags (Olga Kornievskaia) [RHEL-171581]
  - fs: refactor file timestamp update logic (Olga Kornievskaia) [RHEL-171581]
  - nfsd: freeze c/mtime updates with outstanding WRITE_ATTRS delegation (Olga Kornievskaia) [RHEL-171581]
  - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172775] {CVE-2026-43056}
  - bonding: 3ad: Add support for 1600G speed (Kamal Heib) [RHEL-165176]
  - net: ethtool: Add support for 1600Gbps speed (Kamal Heib) [RHEL-165176]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-243.el10]
changelog:
  - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-178260]
  - nvme: make nvme_add_ns{_head}_cdev return void (Utkarsh Singh) [RHEL-186079]
  - nvme: fix crash and memory leak during invalid cdev teardown (Utkarsh Singh) [RHEL-186079]
  - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-185104]
  - KVM: s390: Increase permitted SE header size to 1 MiB (Ramesh Chhetri) [RHEL-185661]
  - net/sched: fix pedit partial COW leading to page cache corruption (CKI Backport Bot) [RHEL-177381] {CVE-2026-46331}
  - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-176465] {CVE-2026-31739}
  - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-176465]
  - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-176465]
  - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180700] {CVE-2026-31530}
  - s390/uv: Fix comment of uv_find_secret() function (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Fix memory leak with CCA cards used as accelerator (Mircea Dragan) [RHEL-136440]
  - crypto: s390/paes - Refuse clear key material by default (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Support new xflag PKEY_XFLAG_NOCLEARKEY (Mircea Dragan) [RHEL-136440]
  - crypto: skcipher - Add new helper function crypto_skcipher_tested (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Select crypto engine in Kconfig when PAES is chosen (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Extend protected key conversion retry loop (Mircea Dragan) [RHEL-136440]
  - s390/crypto: Rework protected key AES for true asynch support (Mircea Dragan) [RHEL-136440]
  - s390/cpacf: Rework cpacf_pcc() to return condition code (Mircea Dragan) [RHEL-136440]
  - s390/pkey/crypto: Introduce xflags param for pkey in-kernel API (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Provide and pass xflags within pkey and zcrypt layers (Mircea Dragan) [RHEL-136440]
  - s390/uv: Remove uv_get_secret_metadata function (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Use preallocated memory for retrieve of UV secret metadata (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework EP11 pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/pkey: Rework CCA pkey handler to use stack for small memory allocs (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 misc functions to use cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Locate ep11_domain_query_info onto the stack instead of kmalloc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Propagate xflags argument with cca_get_info() (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca misc functions kmallocs to use the cprb mempool (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework ep11 findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework cca findcard() implementation and callers (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove CCA and EP11 card and domain info caches (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Remove unused functions from cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for ep11 misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce pre-allocated device status array for cca misc (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Rework zcrypt function zcrypt_device_status_mask_ext (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for ep11 misc functions (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Introduce cprb mempool for cca misc functions (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: New xflag parameter (Mircea Dragan) [RHEL-136440]
  - s390/zcrypt: Avoid alloc and copy of ep11 targets if kernelspace cprb (Mircea Dragan) [RHEL-136440]
  - s390/ap: Introduce ap message buffer pool (Mircea Dragan) [RHEL-136440]
  - s390/ap/zcrypt: Rework AP message buffer allocation (Mircea Dragan) [RHEL-136440]
  - s390/ap: Move response_type struct into ap_msg struct (Mircea Dragan) [RHEL-136440]
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179311] {CVE-2026-46090}
  - KVM: s390: vsie: Allow non-zarch guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add KVM capability for ESA mode guests (Mircea Dragan) [RHEL-136477]
  - KVM: s390: Add capability that forwards operation exceptions (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Accommodate ESA prefix pages (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Disable some bits when in ESA mode (Mircea Dragan) [RHEL-136477]
  - KVM: s390: only deliver service interrupt with payload (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: retry SIE when unable to get vsie_page (Mircea Dragan) [RHEL-136477]
  - KVM: s390: vsie: Check alignment of BSCA header (Mircea Dragan) [RHEL-136477]
  - rhashtable: Fix rhashtable_try_insert test (Herton R. Krzesinski) [RHEL-115002]
  - rhashtable: Fix potential deadlock by moving schedule_work outside lock (Herton R. Krzesinski) [RHEL-115002]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-244.el10]
changelog:
  - x86/microcode: Add platform mask to Intel microcode "old" list (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/cpu: Add platform ID to CPU matching structure (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/cpu: Add platform ID to CPU info structure (Luis Claudio R. Goncalves) [RHEL-184788]
  - x86/microcode: Refactor platform ID enumeration into a helper (Luis Claudio R. Goncalves) [RHEL-184788]
  - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-186142]
  - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180777]
  - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180777]
  - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180777]
  - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180777] {CVE-2025-38614}
  - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180777]
  - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180777]
  - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180777]
  - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180777] {CVE-2026-46242}
  - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180777]
  - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180777]
  - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180777]
  - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173837] {CVE-2026-43074}
  - epoll: annotate racy check (Ian Kent) [RHEL-180777]
  - ima: Add code comments to explain IMA iint cache atomic_flags (Bruno Meneguele) [RHEL-104343]
  - evm: fix security.evm for a file with IMA signature (Bruno Meneguele) [RHEL-104343]
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183963] {CVE-2026-46316}
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181905] {CVE-2026-46259}
  - mei: late_bind: fix struct intel_lb_component_ops kernel-doc (Steve Best) [RHEL-177639]
  - misc/mei: INTEL_MEI should depend on X86 or DRM_XE (Steve Best) [RHEL-177639]
  - mei: me: reduce the scope on unexpected reset (Steve Best) [RHEL-177639]
  - mei: trace: treat reg parameter as string (Steve Best) [RHEL-177639]
  - misc/mei: gsc_proxy: add dependency on Xe driver (Steve Best) [RHEL-177639]
  - misc/mei: Allow building standalone for compile testing (Steve Best) [RHEL-177639]
  - misc/mei: Decouple ME interfaces from GPU drivers (Steve Best) [RHEL-177639]
  - misc/mei: Allow building Intel ME interface on non-x86 (Steve Best) [RHEL-177639]
  - mei: Fix error handling in mei_register (Steve Best) [RHEL-177639]
  - mei: gsc: add dependency on Xe driver (Steve Best) [RHEL-177639]
  - mei: Remove redundant pm_runtime_mark_last_busy() calls (Steve Best) [RHEL-177639]
  - mei: fix error flow in probe (Steve Best) [RHEL-177639]
  - mei: txe: fix initialization order (Steve Best) [RHEL-177639]
  - mei: late_bind: Fix -Wincompatible-function-pointer-types-strict (Steve Best) [RHEL-177639]
  - redhat/configs: disable CONFIG_INTEL_MEI_LB (Steve Best) [RHEL-177639]
  - mei: late_bind: add late binding component driver [partial] (Steve Best) [RHEL-177639]
  - mei: bus: add mei_cldev_mtu interface (Steve Best) [RHEL-177639]
  - mei: gsc: demote unexpected reset print (Steve Best) [RHEL-177639]
  - mei: bus: demote error on connect (Steve Best) [RHEL-177639]
  - mei: retry connect if interrupted by link reset (Steve Best) [RHEL-177639]
  - mei: make a local copy of client uuid in connect (Steve Best) [RHEL-177639]
  - mei: me: trigger link reset if hw ready is unexpected (Steve Best) [RHEL-177639]
  - mei: gsc: fix remove operations order (Steve Best) [RHEL-177639]
  - mei: hook mei_device on class device (Steve Best) [RHEL-177639]
  - RDMA/irdma: Add support for GEN4 hardware (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Provide scratch buffers to firmware for internal use (Michal Schmidt) [RHEL-186151]
  - RDMA: Don't use %pK through printk (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Harden depth calculation functions (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Return EINVAL for invalid arp index error (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix deadlock during netdev reset with active connections (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Clean up unnecessary dereference of event->cm_node (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Update ibqp state to error if QP is already in error state (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Initialize free_qp completion before using it (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix double free related to rereg_user_mr (Michal Schmidt) [RHEL-186151]
  - RDMA: Complete k[z|m|c]alloc-to-k[z|m]alloc_obj conversion [irdma] (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (Michal Schmidt) [RHEL-186151]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [irdma] (Michal Schmidt) [RHEL-186151]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [irdma] (Michal Schmidt) [RHEL-186151]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [irdma] (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Use kvzalloc for paged memory DMA address array (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Use CQ ID for CEQE context (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Add enum defs for reserved CQs/QPs (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove fixed 1 ms delay during AH wait loop (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Remove redundant dma_wmb() before writel() (Michal Schmidt) [RHEL-186151]
  - RDMA/irdma: Simplify bool conversion (Michal Schmidt) [RHEL-186151]
  - rtla: Fix parsing of multi-character short options (Tomas Glozar) [RHEL-151369]
  - tracing: Fix potential deadlock in cpu hotplug with osnoise (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Convert links to RST format (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Document SIGINT behavior (Tomas Glozar) [RHEL-151369]
  - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-151369 RHEL-151475]
  - rtla/utils: Fix loop condition in PID validation (Tomas Glozar) [RHEL-151369]
  - rtla/utils: Fix resource leak in set_comm_sched_attr() (Tomas Glozar) [RHEL-151369]
  - rtla/trace: Fix I/O handling in save_trace_to_file() (Tomas Glozar) [RHEL-151369]
  - rtla/trace: Fix write loop in trace_event_save_hist() (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Simplify RTLA_NO_BPF environment variable check (Tomas Glozar) [RHEL-151369]
  - rtla: Use str_has_prefix() for option prefix check (Tomas Glozar) [RHEL-151369]
  - rtla: Enforce exact match for time unit suffixes (Tomas Glozar) [RHEL-151369]
  - rtla: Use str_has_prefix() for prefix checks (Tomas Glozar) [RHEL-151369]
  - rtla: Add str_has_prefix() helper function (Tomas Glozar) [RHEL-151369]
  - rtla: Handle pthread_create() failure properly (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Add bounds check for softirq vector (Tomas Glozar) [RHEL-151369]
  - rtla: Simplify code by caching string lengths (Tomas Glozar) [RHEL-151369]
  - rtla: Replace magic number with MAX_PATH (Tomas Glozar) [RHEL-151369]
  - rtla: Introduce common_threshold_handler() helper (Tomas Glozar) [RHEL-151369]
  - rtla/actions: Simplify argument parsing (Tomas Glozar) [RHEL-151369]
  - rtla: Use strdup() to simplify code (Tomas Glozar) [RHEL-151369]
  - rtla: Exit on memory allocation failures during initialization (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus from for_each_monitored_cpu (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus members (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unneeded nr_cpus arguments (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate nr_cpus usage across all tools (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Document --stack-format option (Tomas Glozar) [RHEL-136812 RHEL-151369]
  - rtla/timerlat: Add --stack-format option (Tomas Glozar) [RHEL-136812 RHEL-151369]
  - tools/rtla: Add unit tests for utils.c (Tomas Glozar) [RHEL-151369]
  - tools/build: Add feature test for libcheck (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Generate optstring from long options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Add hwnoise to main page (Tomas Glozar) [RHEL-151369]
  - rtla: Fix build without libbpf header (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Include defaults for tracer options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Mention default cgroup state (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Mention default priority (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Correct tracer name for common options (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in rtla-timerlat-top.rst (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: Fix typo in common_options.txt (Tomas Glozar) [RHEL-151369]
  - Documentation/rtla: rename common_xxx.rst files to common_xxx.txt (Tomas Glozar) [RHEL-151369]
  - rtla: Fix parse_cpu_set() bug introduced by strtoi() (Tomas Glozar) [RHEL-151369]
  - rtla: Fix parse_cpu_set() return value documentation (Tomas Glozar) [RHEL-151369]
  - rtla: Ensure null termination after read operations in utils.c (Tomas Glozar) [RHEL-151369]
  - rtla: Make stop_tracing variable volatile (Tomas Glozar) [RHEL-151369]
  - rtla: Add generated output files to gitignore (Tomas Glozar) [RHEL-151369]
  - rtla: Fix NULL pointer dereference in actions_parse (Tomas Glozar) [RHEL-151369]
  - rtla: Remove unused headers (Tomas Glozar) [RHEL-151369]
  - rtla: Remove redundant memset after calloc (Tomas Glozar) [RHEL-151369]
  - rtla: Use standard exit codes for result enum (Tomas Glozar) [RHEL-151369]
  - rtla: Replace atoi() with a robust strtoi() (Tomas Glozar) [RHEL-151369]
  - rtla: Introduce for_each_action() helper (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Deduplicate cgroup path opening code (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -H/--house-keeping option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -P/--priority option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -e/--event option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -d/--duration option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -D/--debug option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -C/--cgroup option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Consolidate -c/--cpus option parsing (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add common_parse_options() (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add common_usage() (Tomas Glozar) [RHEL-151369]
  - rtla: Set stop threshold after all instances are enabled (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unused function declarations (Tomas Glozar) [RHEL-151369]
  - tracing: Fix multiple typos in trace_osnoise.c (Tomas Glozar) [RHEL-151369]
  - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-147742 RHEL-151369]
  - rtla/tests: Don't rely on matching ^1ALL (Tomas Glozar) [RHEL-151369]
  - rtla: Fix -a overriding -t argument (Tomas Glozar) [RHEL-151369]
  - rtla: Fix -C/--cgroup interface (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace osnoise_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace osnoise_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace timerlat_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Replace timerlat_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add fatal() and replace error handling pattern (Tomas Glozar) [RHEL-151369]
  - rtla/tests: Fix osnoise test calling timerlat (Tomas Glozar) [RHEL-151369]
  - rtla/tests: Extend action tests to 5s (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Fix --on-threshold always triggering (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Fix unassigned nr_cpus (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Remove unused optional option_index (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add for_each_monitored_cpu() helper (Tomas Glozar) [RHEL-151369]
  - tools/rtla: Add remaining support for osnoise actions (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Add test engine support for unexpected output (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Fix -A option name in test comment (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Consolidate code between osnoise/timerlat and hist/top (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Create common_apply_config() (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Move top/hist params into common struct (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tools/rtla: Consolidate common parameters into shared structure (Tomas Glozar) [RHEL-115523 RHEL-151369]
  - tracing: Replace opencoded cpumask_next_wrap() in move_to_next_cpu() (Tomas Glozar) [RHEL-151369]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-245.el10]
changelog:
  - riscv: entry: Split ret_from_fork() into user and kernel (Jennifer Berringer) [RHEL-188766]
  - riscv: entry: Convert ret_from_fork() to C (Jennifer Berringer) [RHEL-188766]
  - ACPICA: actbl2: Add definitions for RIMT (Jennifer Berringer) [RHEL-187991]
  - soc/tegra: Use ARM SMCCC to get chip ID, revision, and platform info (Steve Dunnagan) [RHEL-143339]
  - dma-debug: suppress cacheline overlap warning when arch has no DMA alignment requirement (Jerry Snitselaar) [RHEL-182720]
  - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (Steve Best) [RHEL-182291]
  - redhat/configs: riscv: Enable ARCH_SPACEMIT (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Clear interrupt move state during CPU offlining (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-aplic: Prevent crash when MSI domain is missing (Jennifer Berringer) [RHEL-174301] {CVE-2024-56682}
  - irqchip/riscv-imsic: Adjust the number of available guest irq files (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Add a CPU pm notifier to restore the IMSIC on exit (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Inline imsic_vector_from_local_id() (Jennifer Berringer) [RHEL-174301]
  - irqchip/irq-riscv-imsic-early: Export imsic_acpi_get_fwnode() (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Don't dereference before NULL pointer check (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Add kernel parameter to disable IPIs (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Convert to msi_create_parent_irq_domain() helper (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Start local sync timer on correct CPU (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Avoid interrupt translation in interrupt handler (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Implement irq_force_complete_move() for IMSIC (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector (Jennifer Berringer) [RHEL-174301]
  - irqchip/riscv: Ensure ordering of memory writes and IPI writes (Jennifer Berringer) [RHEL-174301]
  - serial: 8250_of: manage bus clock in suspend/resume (Jennifer Berringer) [RHEL-174301]
  - serial: 8250_of: add support for an optional bus clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: mark top_dclk as CLK_IS_CRITICAL (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc() (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: k3: Decouple composite reset lines (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: return -ENOTSUPP for unsupported pin configurations (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: Add SpacemiT K3 reset driver (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: Extract common K1 reset code (Jennifer Berringer) [RHEL-174301]
  - reset: Create subdirectory for SpacemiT drivers (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: fix auxiliary device id (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: Add K3 reset support and IDs (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: support I/O power domain configuration (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: add the clock tree (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k3: extract common header (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: add plla type clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: add inverted enable gate clock (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: k3: add clock support (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: add platform SoC prefix to reset name (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: extract common ccu functions (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: prepare common ccu header (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: k3: adjust drive strength and schmitter trigger (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: k3: add initial pin support (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Hide common clock driver from user controller (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Respect Kconfig setting when building modules (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Set clk_hw_onecell_data::num before using flex array (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix comment typo (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix i2s clock (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: introduce pre-div for ddn clock (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: introduce i2s pre-clock to fix i2s clock (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: fix typo in PRI_TDI pin name (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_mix: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_ddn: convert from round_rate() to determine_rate() (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: fix sspax_clk (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: CLK_SSPA_I2S_BCLK for SSPA (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: remove extra line in debug output (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback (Jennifer Berringer) [RHEL-174301]
  - reset: spacemit: add support for SpacemiT CCU resets (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: mark K1 pll1_d8 as critical (Jennifer Berringer) [RHEL-174301] {CVE-2025-38633}
  - clk: spacemit: define three reset-only CCUs (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: set up reset auxiliary devices (Jennifer Berringer) [RHEL-174301]
  - soc: spacemit: create a header for clock/reset registers (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: define spacemit,k1-ccu resets (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: add clock support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: k1: Add TWSI8 bus and function clocks (Jennifer Berringer) [RHEL-174301]
  - clk: spacemit: Add clock support for SpacemiT K1 SoC (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: clock: spacemit: Add spacemit,k1-pll (Jennifer Berringer) [RHEL-174301]
  - dt-bindings: soc: spacemit: Add spacemit,k1-syscon (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: PINCTRL_SPACEMIT_K1 should not default to y unconditionally (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: destroy mutex at driver detach (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: enable config option (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: fix double free of map (Jennifer Berringer) [RHEL-174301]
  - pinctrl: spacemit: add support for SpacemiT K1 SoC (Jennifer Berringer) [RHEL-174301]
  - reset: amlogic: move drivers to a dedicated directory (Jennifer Berringer) [RHEL-174301]
  - reset: amlogic: convert driver to regmap (Jennifer Berringer) [RHEL-174301]
  - dts: riscv: spacemit: k3: add P1 PMIC regulator tree (Jennifer Berringer) [RHEL-174301]
  - dts: riscv: spacemit: k3: Add i2c nodes (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable PCIe ports on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable USB 3 ports on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable QSPI and add SPI NOR on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add i2c aliases on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add 24c04 eeprom on Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add LEDs for Milk-V Jupiter board (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add ethernet device for K3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: drop incorrect pinctrl for combo PHY (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: reorder phy nodes for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add full resource to UART (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add GPIO support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add pinctrl support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k3: add clock tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add 'linux,pci-domain' to PCIe nodes for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: adapt regulator node name to preferred form (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Update PMIC supply properties for BPI-F3 and Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: pcie: fix missing power regulator (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Disable ETH PHY sleep mode for OrangePi (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: pinctrl: update register and IO power (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add K3 Pico-ITX board support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add initial support for K3 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: k1: Add "b" ISA extension (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable USB3.0 on BananaPi-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add DWC3 USB 3.0 controller node for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add USB2 PHY node for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: sdhci: add reset support (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add reset property (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: PCIe and PHY-related updates (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add a PCIe regulator (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Define the P1 PMIC regulators for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Define fixed regulators for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable i2c8 adapter for Milk-V Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define all missing I2C controller nodes (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: reorder i2c2 node (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add OrangePi R2S board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable K1 SoC QSPI on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add MusePi Pro board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add Ethernet and PDMA to OrangePi RV2 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add i2c aliases on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add 24c02 eeprom on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable the i2c2 adapter on BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define regulator constraints (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: define fixed regulators (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable the i2c8 adapter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add UART pinctrl combinations (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Ethernet support for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: uart: remove sec_uart1 device node (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Enable PDMA on Banana Pi F3 and Milkv Jupiter (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add PDMA node for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add UART resets for Soc K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add OrangePi RV2 board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Move eMMC under storage-bus for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Move UARTs under dma-bus for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add DMA translation buses for K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add pwm14_1 pinctrl setting (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add PWM support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add reset support for the K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: enable eMMC for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add gpio LED for system heartbeat (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add gpio support for K1 SoC (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Acquire clocks for UART (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Acquire clocks for pinctrl (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add clock tree for SpacemiT K1 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: Add Milk-V Jupiter board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: move aliases to board dts (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add pinctrl property to uart0 in BPI-F3 (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: spacemit: add Banana Pi BPI-F3 board device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: dts: add initial SpacemiT K1 SoC device tree (Jennifer Berringer) [RHEL-174301]
  - riscv: add SpacemiT SoC family Kconfig support (Jennifer Berringer) [RHEL-174301]
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179911] {CVE-2026-46209}
  - platform/x86: intel-hid: disable wakeup_mode during hibernation (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Add Dell 16 Plus 2-in-1 to dmi_vgbs_allow_list (Steve Best) [RHEL-176441]
  - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (Steve Best) [RHEL-176441]
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (Steve Best) [RHEL-176441]
  - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() (Steve Best) [RHEL-176441]
  - platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable (Steve Best) [RHEL-176441]
  - platform/x86: intel_telemetry: Fix PSS event register mask (Steve Best) [RHEL-176441]
  - platform/x86: intel_telemetry: Fix swapped arrays in PSS output (Steve Best) [RHEL-176441]
  - platform/x86: intel: punit_ipc: fix memory corruption (Steve Best) [RHEL-176441]
  - New configs in drivers/platform (Steve Best) [RHEL-176441]
  - platform/x86/intel: Introduce Intel Elkhart Lake PSE I/O (Steve Best) [RHEL-176441]
  - platform/x86/amd: hfi: Remove redundant assignment to .owner (Steve Best) [RHEL-176387]
  - platform/x86/amd: hfi: Remove unused cpumask from cpuinfo struct (Steve Best) [RHEL-176387]
  - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Expose all package CPUs in PMU cpumask (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Remove incorrect CPU check in PMU context (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Add PL4 support for Ice Lake (Steve Best) [RHEL-130025]
  - powercap: Replace sprintf() with sysfs_emit() in sysfs show functions (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Fix possible recursive lock warning (Steve Best) [RHEL-130025]
  - powercap: fix sscanf() error return value handling (Steve Best) [RHEL-130025]
  - powercap: fix race condition in register_control_type() (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Enable MSR-based RAPL PMU support (Steve Best) [RHEL-130025]
  - powercap: intel_rapl: Prepare read_raw() interface for atomic-context callers (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (Steve Best) [RHEL-130025]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (Steve Best) [RHEL-130025]
  - powercap: idle_inject: use us_to_ktime() where appropriate (Steve Best) [RHEL-130025]
  - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting (Jennifer Berringer) [RHEL-174305] {CVE-2026-23287}
  - irqchip/sifive-plic: Handle number of hardware interrupts correctly (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Fix call to __plic_toggle() in M-Mode code path (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Add support for UltraRISC DP1000 PLIC (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Cache the interrupt enable state (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Respect mask state when setting affinity (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Use for_each_present_cpu() instead of for_each_cpu() (Jennifer Berringer) [RHEL-174305]
  - irqchip/sifive-plic: Make use of __assign_bit() (Jennifer Berringer) [RHEL-174305]
  - cache: sifive_ccache: Optimize cache flushes (Jennifer Berringer) [RHEL-174305]
  - PCI: starfive: Use regulator APIs to control the 3v3 power supply of PCIe slots (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Append JH-7110 SoC compatible to VisionFive 2 Lite eMMC board (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Append JH-7110 SoC compatible to VisionFive 2 Lite board (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Orange Pi RV (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add VisionFive 2 Lite eMMC board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add VisionFive 2 Lite board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Add common board dtsi for VisionFive 2 Lite variants (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: Move out some nodes to the board dts (Jennifer Berringer) [RHEL-174305]
  - dts: starfive: jh7110-common: split out mmc0 reset pins from common into boards (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Milk-V Mars CM Lite system-on-module (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add Milk-V Mars CM system-on-module (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add common board dtsi for Milk-V Mars CM variants (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop mmc post-power-on-delay-ms (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop no-mmc property from mmc1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: bootph-pre-ram hinting needed by boot loader (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: add DMC memory controller (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: drop no-sdio property from mmc1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add status power led node (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-milkv-mars sort properties (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: bootph-pre-ram hinting needed by boot loader (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add eeprom node to i2c5 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: qspi flash setting read-delay 2 cycles max 100MHz (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: add CPU BUS PERH QSPI clocks to syscrg (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: use macros for MMC0 pins (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: fml13v01: enable USB 3.0 port (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-pine64-star64: enable USB 3.0 port (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110: pciephy0 USB 3.0 configuration registers (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: fml13v01: enable pcie1 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: remove non-existent dac from jh7110 (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Unify regulator naming scheme (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-milkv-mars: enable usb0 host function (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-pine64-star64: enable usb0 host function (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: add DeepComputing FML13V01 board device tree (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: move usb0 config to board dts (Jennifer Berringer) [RHEL-174305]
  - riscv: dts: starfive: jh7110-common: revised device node (Jennifer Berringer) [RHEL-174305]
  - redhat/configs: enable CONFIG_GPIO_NOVALAKE for x86 on RHEL (Steve Best) [RHEL-117349]
  - gpio: Add Intel Nova Lake ACPI GPIO events driver (Steve Best) [RHEL-117349]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-246.el10]
changelog:
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189498] {CVE-2026-43112}
  - objtool/x86: Reorder ORC register numbering (Yannick Cote) [RHEL-152190]
  - objtool: Support Clang RAX DRAP sequence (Yannick Cote) [RHEL-152190]
  - objtool/klp: Correlate locals to globals (Yannick Cote) [RHEL-152190]
  - objtool/klp: Match symbols based on demangled_name for global variables (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove .llvm suffix in demangle_name() (Yannick Cote) [RHEL-152190]
  - objtool/klp: Also demangle global objects (Yannick Cote) [RHEL-152190]
  - objtool/klp: Use sym->demangled_name for symbol_name hash (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove trailing '_' in demangle_name() (Yannick Cote) [RHEL-152190]
  - objtool/klp: Remove redundant strcmp() in correlate_symbols() (Yannick Cote) [RHEL-152190]
  - objtool: Use section/symbol type helpers (Yannick Cote) [RHEL-152190]
  - redhat/configs: disable CONFIG_INET_PSP on RHEL for now (Ivan Vecera) [RHEL-185448]
  - psp: strip variable-length PSP header in psp_dev_rcv() (Ivan Vecera) [RHEL-185448]
  - net: psp: require admin permission for dev-set and key-rotate (Ivan Vecera) [RHEL-185448]
  - net: psp: check for device unregister when creating assoc (Ivan Vecera) [RHEL-185448]
  - psp: add missing device stats to get-stats reply attributes (Ivan Vecera) [RHEL-185448]
  - psp: use sk->sk_hash in psp_write_headers() (Ivan Vecera) [RHEL-185448]
  - net: psp: select CONFIG_SKB_EXTENSIONS (Ivan Vecera) [RHEL-185448]
  - psp: Expand PSP acronym in INET_PSP help description (Ivan Vecera) [RHEL-185448]
  - psp: clarify checksum behavior of psp_dev_rcv() (Ivan Vecera) [RHEL-185448]
  - psp: don't use flags for checking sk_state (Ivan Vecera) [RHEL-185448]
  - psp: fix preemptive inet_twsk() cast in psp_sk_get_assoc_rcu() (Ivan Vecera) [RHEL-185448]
  - psp: make struct sock argument const in psp_sk_get_assoc_rcu() (Ivan Vecera) [RHEL-185448]
  - psp: add stats from psp spec to driver facing api (Ivan Vecera) [RHEL-185448]
  - psp: report basic stats from the core (Ivan Vecera) [RHEL-185448]
  - net: psp: don't assume reply skbs will have a socket (Ivan Vecera) [RHEL-185448]
  - psp: do not use sk_dst_get() in psp_dev_get_for_sock() (Ivan Vecera) [RHEL-185448]
  - psp: rename our psp_dev_destroy() (Ivan Vecera) [RHEL-185448]
  - psp: provide decapsulation and receive helper for drivers (Ivan Vecera) [RHEL-185448]
  - psp: provide encapsulation helper for drivers (Ivan Vecera) [RHEL-185448]
  - psp: track generations of device key (Ivan Vecera) [RHEL-185448]
  - net: psp: update the TCP MSS to reflect PSP packet overhead (Ivan Vecera) [RHEL-185448]
  - net: psp: add socket security association code (Ivan Vecera) [RHEL-185448]
  - net: tcp: allow tcp_timewait_sock to validate skbs before handing to device (Ivan Vecera) [RHEL-185448]
  - net: move sk_validate_xmit_skb() to net/core/dev.c (Ivan Vecera) [RHEL-185448]
  - psp: add op for rotation of device key (Ivan Vecera) [RHEL-185448]
  - tcp: add datapath logic for PSP with inline key exchange (Ivan Vecera) [RHEL-185448]
  - net: modify core data structures for PSP datapath support (Ivan Vecera) [RHEL-185448]
  - psp: base PSP device support (Ivan Vecera) [RHEL-185448]
  - psp: add documentation (Ivan Vecera) [RHEL-185448]
  - scsi: target: iscsi: Validate CHAP_R length before base64 decode (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: tcm_loop: Fix NULL ptr dereference (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: reject invalid size Extended CDB AHS (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Maurizio Lombardi) [RHEL-163760] {CVE-2026-46149}
  - scsi: target: tcm_loop: Drain commands in target_reset handler (Maurizio Lombardi) [RHEL-163760] {CVE-2026-43054}
  - scsi: target: Fix recursive locking in __configfs_open_file() (Maurizio Lombardi) [RHEL-163760] {CVE-2026-23292}
  - scsi: target: Reset t_task_cdb pointer in error case (Maurizio Lombardi) [RHEL-163760] {CVE-2025-68782}
  - scsi: target: Do not write NUL characters into ASCII configfs output (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Maurizio Lombardi) [RHEL-163760] {CVE-2025-68229}
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Maurizio Lombardi) [RHEL-163760] {CVE-2025-39998}
  - scsi: target: iscsi: fix typos and formatting in lio_target messages (Maurizio Lombardi) [RHEL-163760]
  - scsi: target: iscsi: Use int type to store negative value (Maurizio Lombardi) [RHEL-163760]
  - arm64/simd: Add scoped guard API for kernel mode SIMD (CKI Backport Bot) [RHEL-180976]
  - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171143] {CVE-2026-31684}
  - exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case (Oleg Nesterov) [RHEL-95059]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-247.el10]
changelog:
  - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180047] {CVE-2026-46155}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180047]
  - nvme-fc: Do not cancel requests in io target before it is initialized (Utkarsh Singh) [RHEL-178259]
  - tg3: Fix race for querying speed/duplex (Thomas Walsh) [RHEL-182561]
  - EDAC/amd64: Add support for AMD family 1Ah-based newer models (Joel Savitz) [RHEL-100950]
  - EDAC/mc_sysfs: Increase legacy channel support to 16 (Joel Savitz) [RHEL-100950]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses [gve] (Michal Schmidt) [RHEL-178516]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments [gve] (Michal Schmidt) [RHEL-178516]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument [gve] (Michal Schmidt) [RHEL-178516]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types [gve] (Michal Schmidt) [RHEL-178516]
  - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-178516]
  - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-178516]
  - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-178516]
  - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-178516]
  - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-178516]
  - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-178516]
  - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-178516]
  - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-178516] {CVE-2026-23386}
  - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-178516]
  - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-178516] {CVE-2026-23262}
  - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-178516]
  - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-178516]
  - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-178516] {CVE-2025-71156}
  - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-178516]
  - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-178516]
  - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-178516]
  - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-178516]
  - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-178516]
  - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-178516]
  - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-178516]
  - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-178516]
  - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-178516]
  - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-178516]
  - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-178516] {CVE-2025-40298}
  - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-178516] {CVE-2025-40299}
  - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-178516]
  - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-178516]
  - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-178516] {CVE-2025-38735}
  - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-178516]
  - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-178516]
  - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-178516]
  - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-178516]
  - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-178516]
  - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-178516]
  - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-178516]
  - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-178516]
  - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-178516]
  - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-178516]
  - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-178516]
  - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-178516]
  - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-178516]
  - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-178516]
  - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-178516]
  - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-178516]
  - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-178516]
  - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-178516]
  - gve: Add initial PTP device support (Michal Schmidt) [RHEL-178516]
  - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-178516]
  - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-178516]
  - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-178516] {CVE-2025-38122}
  - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-178516]
  - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-178516]
  - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-178516]
  - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-178516]
  - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-178516]
  - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-178516]
  - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-178516]
  - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-178516]
  - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-178516]
  - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-178516]
  - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-178516]
  - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-178516]
  - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-178516]
  - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-178516]
  - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-178516]
  - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-178516] {CVE-2024-57933}
  - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-178516] {CVE-2024-57932}
  - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-178516]
  - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-178516]
  - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-178516]
  - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-178516]
  - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-178516]
  - gve: add support for basic queue stats (Michal Schmidt) [RHEL-178516]
  - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-178516]
  - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-178516]
  - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-178516]
  - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-178516]
  - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180077] {CVE-2026-46150}
  - sched: idle: Make skipping governor callbacks more consistent (Mark Langsdorf) [RHEL-176383]
  - cpuidle: menu: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: teo: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: haltpoll: Remove single state handling (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Skip governor when only one idle state is available (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Refine intercepts-based idle state lookup (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Adjust the classification of wakeup events (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Refine tick_intercepts vs total events check (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Avoid fake intercepts produced by tick (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Avoid selecting states with zero-size bins (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: menu: Always check timers with tick stopped (Mark Langsdorf) [RHEL-176383]
  - cpuidle: zynq: Switch Michal Simek's email to new one (Mark Langsdorf) [RHEL-176383]
  - cpuidle: menu: Remove incorrect unlikely() annotation (Mark Langsdorf) [RHEL-176383]
  - cpuidle: tegra: Export tegra_cpuidle_pcie_irqs_in_use() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: big_little: Simplify with of_machine_device_match() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Warn instead of bailing out if target residency check fails (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Update header inclusion (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Respect the CPU system wakeup QoS limit for cpuidle (Mark Langsdorf) [RHEL-176383]
  - sched: idle: Respect the CPU system wakeup QoS limit for s2idle (Mark Langsdorf) [RHEL-176383]
  - pmdomain: Respect the CPU system wakeup QoS limit for s2idle (Mark Langsdorf) [RHEL-176383]
  - PM: QoS: Introduce a CPU system wakeup QoS limit (Mark Langsdorf) [RHEL-176383]
  - redhat/configs: enable CONFIG_PM_QOS_CPU_SYSTEM_WAKEUP (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Add missing space to the description (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Simplify intercepts-based state lookup (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Fix tick_intercepts handling in teo_update() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Rework the handling of tick wakeups (Mark Langsdorf) [RHEL-176383]
  - cpuidle: psci: Replace deprecated strcpy in psci_idle_init_cpu (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Decay metrics below DECAY_SHIFT threshold (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Use s64 consistently in teo_update() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Drop redundant function parameter (Mark Langsdorf) [RHEL-176383]
  - cpuidle: governors: teo: Drop misguided target residency check (Mark Langsdorf) [RHEL-176383]
  - cpuidle: teo: Use this_cpu_ptr() where possible (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Add sanity check for exit latency and target residency (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Replace deprecated strcpy in sbi_cpuidle_init_cpu (Mark Langsdorf) [RHEL-176383]
  - Revert "cpuidle: menu: Avoid discarding useful information" (Mark Langsdorf) [RHEL-176383]
  - cpuidle: Fail cpuidle device registration if there is one already (Mark Langsdorf) [RHEL-176383]
  - cpuidle: sysfs: Use sysfs_emit()/sysfs_emit_at() instead of sprintf()/scnprintf() (Mark Langsdorf) [RHEL-176383]
  - cpuidle: qcom-spm: drop unnecessary initialisations (Mark Langsdorf) [RHEL-176383]
  - cpuidle: qcom-spm: fix device and OF node leaks at probe (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Drop redundant sync_state support (Mark Langsdorf) [RHEL-176383]
  - cpuidle: riscv-sbi: Opt-out from genpd's common ->sync_state() support (Mark Langsdorf) [RHEL-176383]
  - dt-bindings: arm: qcom,ids: add SoC ID for IPQ5424/IPQ5404 (Mark Langsdorf) [RHEL-176381]
  - arm64: topology: Fix false warning in counters_read_on_cpu() for same-CPU reads (Mark Langsdorf) [RHEL-176381]
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (Mark Langsdorf) [RHEL-176381]
  - cpufreq: conservative: Reset requested_freq on limits change (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Don't skip cpufreq_frequency_table_cpuinfo() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ondemand: Simplify idle cputime granularity test (Mark Langsdorf) [RHEL-176381]
  - cpufreq: userspace: make scaling_setspeed return the actual requested frequency (Mark Langsdorf) [RHEL-176381]
  - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti-cpufreq: add support for AM62L3 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Add ti,am62l3 to blocklist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: scmi: correct SCMI explanation (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Block the driver from probing on more QC platforms (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Update FIE arch_freq_scale in ticks for non-PCC regs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Factor out cppc_fie_kworker_init() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: add sentinel to qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add Tegra186 and Tegra194 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add new helper function returning cpufreq policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Fix creating device on OPPv1 platforms (Mark Langsdorf) [RHEL-176381]
  - cpufreq: cpufreq_boost_trigger_state() optimization (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Return -EOPNOTSUPP if no policy supports boost (Mark Langsdorf) [RHEL-176381]
  - cpufreq: sun50i: Simplify with of_machine_device_match() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: Simplify with of_machine_get_match_data() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Simplify with of_machine_get_match_data() (Mark Langsdorf) [RHEL-176381]
  - of: Add of_machine_get_match() helper (Mark Langsdorf) [RHEL-176381]
  - of: Add wrappers to match root node with OF device ID tables (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: fix compilation warning for qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ACPI: Replace udelay() with usleep_range() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra194: add WQ_PERCPU to alloc_workqueue users (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: add compatible fallback for ipq806x for no SMEM (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters (Mark Langsdorf) [RHEL-176381]
  - cpufreq: nforce2: fix reference count leak in nforce2 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: add OPP support and set bandwidth (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: fix refcount leak (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Replace deprecated strcpy() in cpufreq_unregister_governor() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: preserve freq_table_sorted across suspend/hibernate (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Initialize all cores to max frequencies (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Set target frequency for all cpus in policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: fix device leak on probe failure (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Replace pointer subtraction with iteration macro (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Add defensive check during driver registration (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ACPI: Use on_each_cpu_mask() in drv_write() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: conservative: Replace sscanf() with kstrtouint() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: core: Rearrange variable declarations involving __free() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Use int type to store negative error codes (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Drop redundant freq_table parameter (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: avoid redundant conditions (Mark Langsdorf) [RHEL-176381]
  - cpufreq: tegra186: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: s5pv210: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: CPPC: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: brcmstb-avs: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176381]
  - cpufreq: use strlen() for governor name comparison (Mark Langsdorf) [RHEL-176381]
  - cpufreq: simplify setpolicy/target check in driver verification (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Allow all silicon revisions to support OPPs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Support more speed grades on AM62Px SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: ti: Add support for AM62D2 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: dt-platdev: Blacklist ti,am62d2 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: don't use error path on NULL fdvfs (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Avoid calling get_governor() for first policy (Mark Langsdorf) [RHEL-176381]
  - cpufreq: qcom-nvmem: Enable cpufreq for ipq5424 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: Remove unused parameter in cppc_perf_from_fbctrs() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-37xx: use max() to calculate target_vm (Mark Langsdorf) [RHEL-176381]
  - cpufreq: airoha: Add support for AN7583 SoC (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Add support for MT8196 (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Separate per-domain and per-instance data (Mark Langsdorf) [RHEL-176381]
  - cpufreq: mediatek-hw: Refactor match data into struct (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() (Mark Langsdorf) [RHEL-176381]
  - cpufreq: armada-8k: make both cpu masks static (Mark Langsdorf) [RHEL-176381]
  - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-171990]
  - selftests: net: add bridge STP mode selection test (Mohammad Heib) [RHEL-171990]
  - docs: net: bridge: document stp_mode attribute (Mohammad Heib) [RHEL-171990]
  - net: bridge: add stp_mode attribute for STP mode selection (Mohammad Heib) [RHEL-171990]
  - selftests: net: bridge_vlan_mcast: wait for h1 before querier check (Mohammad Heib) [RHEL-171990]
  - bridge: guard local VLAN-0 FDB helpers against NULL vlan group (Mohammad Heib) [RHEL-171990]
  - bridge: mrp: reject zero test interval to avoid OOM panic (Mohammad Heib) [RHEL-171990]
  - bridge: br_nd_send: validate ND option lengths (Mohammad Heib) [RHEL-171990]
  - bridge: br_nd_send: linearize skb before parsing ND options (Mohammad Heib) [RHEL-171990]
  - bridge: No DEV_PATH_BR_VLAN_UNTAG_HW for dsa foreign (Mohammad Heib) [RHEL-171990]
  - bridge: cfm: Fix race condition in peer_mep deletion (Mohammad Heib) [RHEL-171990]
  - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (Mohammad Heib) [RHEL-171990]
  - selftests: net: Add bridge VLAN range grouping tests (Mohammad Heib) [RHEL-171990]
  - bridge: Check relevant per-VLAN options in VLAN range grouping (Mohammad Heib) [RHEL-171990]
  - selftests: forwarding: bridge_mdb_max: add tests for mdb_n_entries warning (Mohammad Heib) [RHEL-171990]
  - net: bridge: mcast: always update mdb_n_entries for vlan contexts (Mohammad Heib) [RHEL-171990]
  - net: bridge: use sysfs_emit instead of sprintf (Mohammad Heib) [RHEL-171990]
  - net: bridge: fix static key check (Mohammad Heib) [RHEL-171990]
  - net: bridge: mcast: fix memcpy with u64_stats (Mohammad Heib) [RHEL-171990]
  - u64_stats: Introduce u64_stats_copy() (Mohammad Heib) [RHEL-171990]
  - bus: mhi: ep: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - bus: mhi: host: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - bus: mhi: host: Drop the auto_queue support (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - mhi: host: Add support for loading dual ELF image format (Jose Ignacio Tornos Martinez) [RHEL-171362]
  - net: ethtool: pass genl_info to the ethnl parse_request operation (Mohammad Heib) [RHEL-167299]
  - selftests: rss_drv: Add RSS indirection table resize tests (Mohammad Heib) [RHEL-167299]
  - docs: networking: mention that RSS table should be 4x the queue count (Mohammad Heib) [RHEL-167299]
  - selftests: drv-net: rss: validate min RSS table size (Mohammad Heib) [RHEL-167299]
  - ethtool: Add RSS indirection table resize helpers (Mohammad Heib) [RHEL-167299]
  - ethtool: Track user-provided RSS indirection table size (Mohammad Heib) [RHEL-167299]
  - net: ethtool: re-order local includes (Mohammad Heib) [RHEL-167299]
  - net: ethtool: add ethtool COALESCE_RX_CQE_FRAMES/NSECS (Mohammad Heib) [RHEL-167299]
  - ynl: ethtool: remove duplicated unspec entry (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Update doc for tunable (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Track pause storm events (Mohammad Heib) [RHEL-167299]
  - net: rss: fix reporting RXH_XFRM_NO_CHANGE as input_xfrm for contexts (Mohammad Heib) [RHEL-167299]
  - ethtool: remove ETHTOOL_GRXRINGS fallback through get_rxnfc (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Add support for 80Gbps speed (Mohammad Heib) [RHEL-167299]
  - ethtool: uapi: Use UAPI definition of INT_MAX (Mohammad Heib) [RHEL-167299]
  - uapi: add INT_MAX and INT_MIN constants (Mohammad Heib) [RHEL-167299]
  - ethtool: Clarify len/n_stats fields in/out semantics (Mohammad Heib) [RHEL-167299]
  - net: ethtool: Introduce ETHTOOL_LINK_MEDIUM_* values (Mohammad Heib) [RHEL-167299]
  - ethtool: Avoid overflowing userspace buffer on stats query (Mohammad Heib) [RHEL-167299]
  - ethtool: fix incorrect kernel-doc style comment in ethtool.h (Mohammad Heib) [RHEL-167299]
  - ethtool: netlink: add ETHTOOL_MSG_MSE_GET and wire up PHY MSE access (Mohammad Heib) [RHEL-167299]


