# changelog

author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-81948)
  - Fix order of parsing port/controller properies in nmcli (RHEL-80273)
  - Improve interface activation logic (RHEL-80157)
  - Fix WireGuard IPv6 firewall rules (RHEL-79975)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83058)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-70484)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102774)
  - Allow setting IP method to disabled in port connections (RHEL-90756)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102318)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.55.4-1
changelog:
  - Update to 1.55.4 (dev)
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
  - Add support for a DHCP client-id kernelarg (RHEL-108454)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.55.90-1
changelog:
  - Update to 1.56.0 (rc1)
  - Support setting protocol version of HSR/PRP (RHEL-100764)
  - Support interlink for HSR/PRP (RHEL-100768)
  - Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
  - Improve logging of networking off (RHEL-103925)
  - Don't delete unrelated OVS ports (RHEL-120176)


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Sumit Bose <sbose@redhat.com> - 0.9.3.1-1
changelog:
  - Rebase to latest upstream version
    Resolves: RHEL-2518
    Resolves: RHEL-5044
    Resolves: RHEL-5050
    Resolves: RHEL-16141
    Resolves: RHEL-44580
    Resolves: RHEL-56353
    Resolves: RHEL-78631
    Resolves: RHEL-73686


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250121-12
changelog:
  - Update linux-firmware to latest upstream (RHEL-75551)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - mediatek MT7925: update bluetooth firmware to 20250113153307
  - linux-firmware: update firmware for MT7925 WiFi device
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update yellow carp firmware
  - qcom: correct licence information for SA8775P binaries
  - qcom: update SLPI firmware for RB5 board
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: add DSP firmware for SA8775p platform
  - qcom: correct venus firmware versions
  - qcom: add missing version information
  - linux-firmware: Update firmware (v10) for mt7988 internal
  - iwlwifi: add Bz FW for core90-93 release
  - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  - rtw89: 8852b: update fw to v0.29.29.8
  - rtw89: 8852c: update fw to v0.27.122.0
  - rtw89: 8922a: update fw to v0.35.54.0
  - rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  - rtw89: 8852bt: update fw to v0.29.110.0
  - rtw89: 8852b: update fw to v0.29.29.7
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update sdma 4.4.5 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - cirrus: cs35l56: Correct some links to address the correct amp instance
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  - Fix has_gnu_parallel function
  - rtl_bt: Add separate config for RLT8723CS Bluetooth part
  - amdgpu: revert VCN 3.1.2 firmware
  - amdgpu: revert yellow carp VCN firmware
  - amdgpu: revert sienna cichlid VCN firmware
  - amdgpu: revert navy flounder VCN firmware
  - amdgpu: revert dimgrey cavefish VCN firmware
  - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  - copy-firmware.sh: Fix typo in error message.
  - Add support to install files/symlinks in parallel.
  - Makefile: Remove obsolete/broken reference.
  - check_whence.py: Use a more portable shebang.
  - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E
  - cnm: update chips&media wave521c firmware.
  - WHENCE: Add "Info:" tag to text that's clearly not part of the license
  - rtl_nic: add firmware rtl8125bp-2
  - qcom: venus-5.4: update firmware binary for sc7180 and qcs615
  - cirrus: cs35l56: Correct filenames of SSID 17aa3832
  - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops
  - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43
  - rtl_nic: add firmware rtl8125d-2
  - Merge https://github.com/zijun-hu/qca_btfw into qca-bt
  Resolves: RHEL-75551


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250212-13
changelog:
  - Missing firmware for the enablement of TI AMP TAS2781 SPI driver (RHEL-78328)
  - MI325 GPU firmware (RHEL-78328)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - i915: Update Xe2LPD DMC to v2.28
  - ASoC: tas2781: Add regbin firmware by index for single device
  - WHENCE: qca: add missing version information
  - WHENCE: split generic QCA section into USB and serial sections
  - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D
  - iwlwifi: add Bz/gl FW for core93-123 release
  - iwlwifi: update ty/So/Ma firmwares for core93-123 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release
  - ASoC: tas2781: Add dsp firmware for new projects
  - amdgpu: DMCUB update for DCN401
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: add board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1
  - copy-firmware: Fix 'No such file or directory' error.
  - ath11k: add device-specific firmware for QCM6490 boards
  - qca: add more WCN3950 1.3 NVM files
  - qca: add firmware for WCN3950 chips
  - qca: move QCA6390 firmware to separate section
  - qca: restore licence information for WCN399x firmware
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750
  - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform
  - linux-firmware: Update FW files for MRVL SD8997 chips
  - i915: Update Xe2LPD DMC to v2.27
  - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856
  - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650
  - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037
  - amdgpu: Update ISP FW for isp v4.1.1
  - trivial: contrib: wrap the process in try/except to catch server issues
  - trivial: contrib: use python-magic to detect encoding of emails
  - Merge https://github.com/che-jiang/qca_btfw into qca
  - QCA: Add Bluetooth firmware for QCA6698
  - amdgpu: revert DMCUB 3.1.4 firmware
  - amlogic: update firmware for w265s2
  Resolves: RHEL-78328, RHEL-78328


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250314-15
changelog:
  - accel: ivpu: Update firmware for NPU (RHEL-38586)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
  - rtw89: 8922a: update fw to v0.35.64.0
  - rtw89: 8922a: update fw to v0.35.63.0
  - rtw89: 8852c: update fw to v0.27.125.0
  - iwlwifi: add Bz/gl FW for core94-91 release
  - iwlwifi: update ty/So/Ma firmwares for core94-91 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update gc 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update gc 10.3.7 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - qcom: Update gpu firmwares for qcs8300 chipset
  - linux-firmware: add firmware for qat_420xx devices
  - amdgpu: DMCUB updates for various ASICs
  - i915: Update Xe3LPD DMC to v2.20
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250305133215
  - mediatek MT7920: update bluetooth firmware to 20250210151502
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - intel_vpu: Add firmware for 37xx and 40xx NPUs
  - QCA: Add Bluetooth firmwares for QCA2066 with USB transport
  - QCA: Add two bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
  - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
  - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
  - ASoC: tas2781: Update dsp firmware for Gemtree project
  - xe: Update GUC to v70.40.2 for BMG, LNL
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DCUB update for DCN401 and DCN315
  - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA6698AQ hw2.1: update board-2.bin
  - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7920 WiFi device
  - qca: update WCN3988 firmware
  - amdgpu: Update ISP FW for isp v4.1.1
  - qcom: add firmware for Adreno A225
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - i915: Update Xe3LPD DMC to v2.17
  - ASoC: tas2781: Change regbin firmwares for single device
  Resolves: RHEL-38586


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250521-16
changelog:
  - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
  - Add amdnpu linux firmware folder (RHEL-77950)
  - Introduce new PMF TA (RHEL-86837)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
  - Adjust QUPv3 driver name
  - cnm: Add Chips&Media wave633c firmware for NXP i.MX9
  - qcom: add QUPv3 firmware for QCM6490 platform
  - mediatek: Add mt8196 VCP firmware
  - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
  - nvidia: add GSP-RM version 570.144 firmware images
  - amdgpu: DMCUB updates for various ASICs
  - powervr: add firmware for Imagination Technologies BXS-4-64 GPU
  - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
  - brcmfmac: Add a couple of NanoPi devices
  - rtl_nic: add firmware rtl8127a-1
  - cnm: update chips&media wave521c firmware.
  - intel_vpu: Update NPU firmware
  - intel: avs: Update topology file for Digital Microphone Array
  - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
  - linux-firmware: Amphion: Update vpu firmware
  - amd_pmf: Update AMD PMF TA Firmware to v3.1
  - amdgpu: update dcn 4.01 firmware to 0.1.8.0
  - qcom: Add link for SM8350 GPU firmware
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250425073330
  - rtw89: 8852c: add tables for dynamic antenna TXPWR
  - rtw89: 8922a: update fw to v0.35.71.0
  - brcm: Add NVRAM file for Radxa Rock Pi X mini PC
  - i915: Update Xe3LPD DMC to v2.23
  - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - ath12k: QCN9274 hw2.0: update board-2.bin
  - qcom: vpu: update video firmware binary for SA8775p
  - iwlwifi: add Bz/gl FW for core95-82 release
  - iwlwifi: update ty/So/Ma firmwares for core95-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
  - iwlwifi: add Bz-hr FW for core93-123 release
  - qcom: add QUPv3 firmware for QCS9100 platform
  - ASoC: tas2781: Swap channel for SPI projects.
  - bmi260: Add BMI260 IMU initial configuration data file
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
  - rtw89: 8922a: update element RF TXPWR to R40
  - rtw89: 8852c: update element RF TXPWR to R78
  - rtw89: 8852c: add fw v0.27.125.0 with format version 2
  - Revert "rtw89: 8852c: update fw to v0.27.125.0"
  - qcom: vpu: add video firmware binary for qcm6490
  - contrib: process_linux_firmware: set user agent
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update picasso firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update dcn 4.01 frmware to 0.1.6.0
  - intel: ish: Update license file for ISH
  - intel: avs: Update topology file for I2S Analog Devices 4567
  - intel: avs: Update topology file for I2S Realtek 5663
  - intel: avs: Update topology file for I2S Realtek 5640
  - intel: avs: Update topology file for I2S Realtek 5514
  - intel: avs: Update topology file for I2S Realtek 298
  - intel: avs: Update topology file for I2S Realtek 286
  - intel: avs: Update topology file for I2S Realtek 274
  - intel: avs: Update topology file for I2S Nuvoton 8825
  - intel: avs: Update topology file for I2S Maxim 98927
  - intel: avs: Update topology file for I2S Maxim 98373
  - intel: avs: Update topology file for I2S Maxim 98357a
  - intel: avs: Update topology file for HDAudio codecs
  - intel: avs: Update topology file for HDMI codecs
  - intel: avs: Update topology file for Digital Microphone Array
  - intel: avs: Update topology file for I2S Dialog 7219
  - xe: Update GUC to v70.44.1 for BMG and LNL
  - i915: Update GUC to v70.44.1 for i915 platforms
  - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
  - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
  - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
  - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
  - QCA: Add 8 bluetooth nvm files for WCN785x btusb
  - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
  - qcom: update firmware binary for SM8250
  - mediatek: Add new mt8195 SOF firmware
  - mediatek: Add new mt8188 SOF firmware
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
  - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
  - intel_vpu: Update NPU firmware
  - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
  - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
  - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
  - amdgpu: update dcn 4.01 firmware to 0.1.3.0
  - amdgpu: update dcn 3.5 firmware to 0.1.0.0
  - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
  - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
  - qcom: Add DSP firmware for QCS8300 platform
  - mediatek: Add MT8188 SCP firmware
  - copy-firmware: fail gracefully if moreutils parallel is installed
  - copy-firmware: make script smarter about bad parameters
  - copy-firmware: add usage help text
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add Audio firmware for Lenovo Slim 7x
  - qcom: Add Audio firmware for Lenovo T14s
  - amdgpu: DMCUB updates for various ASICs
  Resolves: RHEL-85120, RHEL-77950, RHEL-86837


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250604-17
changelog:
  - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Update GUC to v70.45.2 for BMG, LNL
  - i915: Update GUC to v70.45.2 for DG2
  - xe: Update LNL GSC to v104.0.5.1429
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add QUPv3 firmware for QCS8300 platform
  - Intel IPU7: Add firmware binary files
  - ice: update wireless_edge package to 1.3.23.0
  - ice: update comms package to 1.3.55.0
  - ice: update package to 1.3.43.0
  - linux-firmware: Update firmware file for Intel Pulsar core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel Quasar core
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - iwlwifi: add Bz/gl FW for core96-76 release
  - iwlwifi: update ty/So/Ma firmwares for core96-76 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
  - iwlwifi: update firmwares for 8000 series
  - iwlwifi: update 7265D firmware
  - mediatek MT7925: update bluetooth firmware to 20250526153203
  - linux-firmware: update firmware for MT7925 WiFi device
  - qcom: sc8280xp: FW blob updates for X13s
  - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
  - cirrus: cs35l41: Fix firmware links for several ASUS laptops
  Resolves: RHEL-92555


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250708-18
changelog:
  - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
  - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Add fan_control v203.0.0.0 for BMG
  - amdgpu: Add DCN 3.6
  - amdgpu: Add PSP 14.0.5
  - amdgpu: Add SDMA 6.1.3
  - amdgpu: Add GC 11.5.3
  - mediatek MT7921: update bluetooth firmware to 20250625154126
  - qcom/adreno: document firmware revisions
  - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - Revert "linux-firmware: Update firmware file for Intel Pulsar core"
  - qcom/adreno: sort entries in WHENCE
  - xe: First HuC release for Pantherlake
  - xe: First GuC release for Pantherlake
  - linux-firmware: update firmware for MT7921 WiFi device
  - rtw89: 8922a: update fw to v0.35.80.0
  - rtw89: 8852c: update fw to v0.27.129.1
  - rtw89: 8852c: update fw to v0.27.128.0
  - WHENCE: extract license texts
  - WHENCE: expand the advansys license statement
  - WHENCE: some older AMD drivers are MIT licensed
  - qcom: update firmware binary for SM8550
  - amdgpu: DMCUB updates for DCN401
  - qcom: venus-5.4: add the firmware binary for qcs615
  - Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
  - amdgpu: update dmcub fw for dcn401
  - qcom: Add sdx61 Foxconn vendor firmware image file
  - brcm: Fix symlinks for Khadas VIM SDIO wifi config
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update sdma 7.0.1 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: add raven2 ip discovery firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update sdma 7.0.0 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: add picasso ip discovery firmware
  - amdgpu: add raven ip discovery firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: add smu 13.0.0 kicker firmware
  - amdgpu: add psp 13.0.0 kicker firmware
  - amdgpu: add gc 11.0.0 kicker firmware
  - amdgpu: add vcn 5.0.1 firmware
  - amdgpu: add sdma 4.4.4 firmware
  - amdgpu: add psp 13.0.12 firmware
  - amdgpu: add gc 9.5.0 firmware
  - amdgpu: add arcturus IP discovery firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update beige_goby firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - WHENCE: fix subtly incorrect licensing
  - amdgpu: update dmcub fw for dcn32 and dcn401
  - mediatek: Update mt8186 SCP firmware
  - amdgpu: Update DMCUB fw for DCN401 & DCN315
  - WHENCE: unify Driver statements
  - qcom: add gpu firmwares for X1P42100 chipset
  - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
  - rtl_nic: update firmware of RTL8153A
  - qcom: sc8280xp: Updated power FW for X13s
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for MT7981
  - linux-firmware: update firmware for MT7916
  - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
  - Revert "iwlwifi: add Bz/gl FW for core96-76 release"
  - amdgpu: DMCUB updates for various ASICs
  - mediatek MT7922: update bluetooth firmware to 20250523103438
  - mediatek MT7921: update bluetooth firmware to 20250523111333
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  Resolves: RHEL-95393, RHEL-100947


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250812-19
changelog:
  - Update linux-firmware to latest upstream (RHEL-108921)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: DMCUB updates for various ASICs
  - panthor: Add firmware for more Mali GPUs
  - amdgpu: update renoir firmware
  - amdgpu: add SMU 14.0.3 kicker firmware
  - amdgpu: add PSP 14.0.3 firmware
  - amdgpu: add GC 12.0.1 kicker firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update SDMA 6.1.2 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SDMA 7.0.1 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update SDMA 7.0.0 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update GC 10.3.7 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update dimgrey_cavefish firmware
  - amdgpu: update aldebaran firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
  - qcom: Add QDSP firmware file for Qualcomm QDU100 device.
  - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
  - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
  - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: Update xbl_config firmware file.
  - amdgpu: Update GCN 4.0.5 microcode
  - amdgpu: Update SDMA 6.1.0 microcode
  - amdgpu: Update GC 11.5.0 microcode
  - qcom: Add QDU100 firmware image files required for booting.
  - linux-firmware: Add firmware for airoha-npu driver
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20250721233113
  - qcom: Update DSP firmware for qcm6490 platform
  - qcom: update Venus firmware file for v6.0
  - i915: Xe3LPD DMC v2.29
  - linux-firmware: Update AMD cpu microcode
  - qcom: Add QCS6490 symlink for QUPv3 firmware
  - qcom: Add firmware binary for SM8750.
  - amdgpu: update dmcub fw for dcn314
  - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
  - cirrus: cs35l41: Update Firmware for Dell Oasis
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - qcom: Add Audio topology for QCS6490 RB3Gen2
  - intel_vpu: Update NPU firmware
  - amdgpu: update dmcub fw for various DCN version
  - WHENCE: extract more license statements
  - WHENCE: clarify io_ti origin
  - amdgpu: Update GC 11.5.1 microcode
  - rtw89: 8852b: update fw to v0.29.128.0
  - rtw89: 8852bt: update fw to v0.29.127.0
  - rtw89: 8922a: add regd fw element with version R72-R6
  - rtw89: 8852c: add regd fw element with version R72-R57
  - rtw89: 8922a: update BB parameter V49
  - qcom: Update gpu firmwares of QCS615 chipset
  - linux-firmware: Update firmware file for Intel Solar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  Resolves: RHEL-108921


author: Denys Vlasenko <dvlasenk@redhat.com> - 20251111-20
changelog:
  - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
  - AMDGPU: Update firmware for Strix Halo (RHEL-104078)
  - AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
  - Update linux-firmware to latest upstream
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
  - rtw88: 8822b: Update firmware to v30.20.0
  - rtl_nic: add firmware rtl8125k-1
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - ASoC: tas2781: Update dsp firmware for HP and ASUS projects
  - amdgpu: DMCUB updates for various ASICs
  - amdgpu: DMCUB updates for various ASICs
  - qcom: add SOCCP firmware for kaanapali platform
  - xe: Update GUC to v70.53.0 for BMG, LNL, PTL
  - i915: Update GUC to v70.53.0 for DG2, MTL
  - rtw89: 8851b: update fw to v0.29.41.5
  - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
  - rtw89: 8852b: update fw to v0.29.29.14
  - Revert "rtw89: 8852b: update fw to v0.29.128.0"
  - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
  - rtw89: 8852bt: update fw to v0.29.122.1
  - Revert "rtw89: 8852bt: update fw to v0.29.127.0"
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251015213201
  - rtl_bt: Add firmware and config files for RTL8761CUV
  - linux-firmware: Update AMD cpu microcode
  - qcom: add ADSP firmware for kaanapali platform
  - amdgpu: DMCUB updates for various ASICs
  - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
  - mediatek MT7920: update bluetooth firmware to 20251020151255
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7920 WiFi device
  - amd-ucode: Fix minimum revisions in README
  - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
  - mediatek MT7922: update bluetooth firmware to 20251020143443
  - Revert "linux-firmware: update firmware for MT7922 WiFi device"
  - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
  - iwlwifi: add Bz/Fm and gl FW for core98-161 release
  - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
  - iwlwifi: update ty/So/Ma firmwares for core98-161 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
  - intel: qat: Fix missing link
  - amdgpu: DMCUB updates for various ASICs
  - nvidia: add generic bootloader for GSP-enabled systems
  - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
  - qcom: vpu: rename firmware binaries
  - Intel IPU7: Update product signed firmware binary
  - i915: Xe2LPD DMC v2.29
  - i915: Xe3LPD DMC v2.32
  - i915: Xe3LPD_3002 DMC v2.27
  - WHENCE: nvidia: rearrange GSP-RM firmware lines
  - linux-firmware: Add ISH firmware file for Intel Pather Lake platform
  - linux-firmware: Update firmware file for Intel Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: add CDSP firmware for kaanapali platform
  - qcom: add version for A650 GMU firmware
  - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
  - qcom: Add firmwares for Kaanapali GPU
  - qcom: Update A623 GMU fw
  - qcom: Fix QCS615 chipset's GPU secure fw
  - qcom: Update DSP firmware for sa8775p platform
  - amdgpu: DMCUB updates for various ASICs
  - WHENCE: remove link for Kaanapali video firmware
  - intel_vpu: Update NPU firmware
  - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
  - Update VCN for Navi1x, Green Sardine and Renoir
  - WHENCE: extract multitech license text
  - WHENCE: extract ueagle license
  - WHENCE: use LICENCE.sensoray for s2255drv
  - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
  - WHENCE: clean up emi62 and yam license statements
  - qcom: vpu: update video firmware binary for SM8550
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
  - qcom: vpu: add video firmware for Kaanapali
  - qcom: Update DSP firmware for qcs8300 platform.
  - qcom: Add Audio topology for HAMOA-EVK
  - intel/ish:Add ISH firmware file for Intel Lunar Lake platform
  - mediatek: update firmware version info for MT7986/81/16
  - linux-firmware: ql2500_fw: update ISP25xx Firmware
  - qcom: Update aic100 firmware files
  - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
  - amdgpu: DMCUB updates for various ASICs
  - mediatek: mtk_wed: drop links for mt7988
  - Revert "amdgpu: update gc 10.3.6 firmware"
  - qcom: Update DSP firmware for qcs8300 platform.
  - powervr: update firmware for Imagination Technologies BXS-4-64 GPU
  - qcom: Update DSP firmware for sa8775p platform.
  - amdgpu: DMCUB updates for various ASICs
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - qcom: move LEMANS EVK firmware to correct location
  - amdgpu: update PSP 14.0.3 kicker firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update VPE 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update SMU 13.0.0 kicker firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update SDMA 6.1.3 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update VPE 6.1.3 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - amdgpu: DMCUB updates for various ASICs
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - mediatek MT7922: update bluetooth firmware to 20250903123504
  - linux-firmware: update firmware for MT7922 WiFi device
  - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
  - qcom: Add Audio topology for MONACO-EVK
  - qcom: add CDSP firmware for qcs615 platform
  - qcom: Add Audio topology for LEMANS-EVK
  - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
  - qcom: vpu: update firmware binaries to fix encoder drain handling
  - intel_vpu: Update NPU firmware
  - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
  - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
  - xe: Update GUC to v70.49.4 for BMG, LNL, PTL
  - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
  - qcom: add ADSP firmware for qcs615 platform
  - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
  - iwlwifi: add Bz-HR FW for core90-93 release
  - Fix link entry for qat_895xcc.bin
  - Move QAT firmware to intel/ subdirectory
  - Move all iwlwifi top level files to intel/ directory
  - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
  - ath11k: Support WCN6855 hw2.1 with NFA firmware variant
  - amdgpu: Update ISP FW for isp v4.1.1
  - Update README.md to clarify S-o-b requirements
  - firmware: qcom: Reorder VPU firmware entries in WHENCE
  - intel_vpu: Update NPU firmware
  - amdgpu: DMCUB updates for various ASICs
  - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
  - cirrus: cs35l41: Move entries to correct driver section in WHENCE
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
  - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
  - qcom: Add firmware binary for SM8650.
  - Link rtl8723b_config.bin to rtl8723bs
  - rtw89: 8922a: update fw to v0.35.80.3
  - rtw89: 8852c: update fw to v0.27.129.4
  - rtw89: 8852c: update fw to v0.27.129.3
  - qcom: add CDSP firmware for x1e80100 platform
  - iwlwifi: add Bz/gl FW for core97-84 release
  - iwlwifi: update ty/So/Ma firmwares for core97-84 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
  - amdgpu: DMCUB updates for various ASICs
  - realtek: rt1321: Add patch firmware of MCU
  - mediatek: Add MT8189 SCP firmware
  Resolves: RHEL-117675, RHEL-104078, RHEL-107606


author: Denys Vlasenko <dvlasenk@redhat.com> - 20260107-21
changelog:
  - Update linux-firmware to latest upstream (RHEL-119866)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: Update aic100 firmware files
  - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
  - firmware: Revert kernel_boot.elf due to license compliance issue
  - linux-firmware: add firmware for an8811hb 2.5G ethernet phy
  - i915: Xe3LPD_3002 DMC v2.28
  - i915: Xe3LPD DMC v2.33
  - intel_vpu: Add firmware for 50xx NPUs and update older ones
  - linux-firmware: Update AMD SEV firmware
  - amdgpu: DMCUB updates for various ASICs
  - qcom: venus-5.4: fix ELF segment alignment to 4 bytes
  - mediatek MT7925: update bluetooth firmware to 20251210093205
  - linux-firmware: update firmware for MT7925 WiFi device
  - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
  - qcom: Update CDSP firmware for qcm6490 platform
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
  - linux-firmware: Add firmware file for Intel Scorpius core
  - rtw89: 8852b: update fw to v0.29.29.15
  - cirrus: cs35l41: Update firmware and tuning for various HP laptops
  - cirrus: cs35l41: Add support for new HP Clipper laptop
  - qcom: drop compatibility a640_zap.mdt symlink
  - qcom: add version for a530v3_gpmu.fw2
  - xe: Update GUC to v70.55.3 for BMG, PTL
  - iwlwifi: add Bz/Sc FW for core101-82 release
  - iwlwifi: Add Sc/Gf firmware for core101-82 release
  - iwlwifi: update ty/So/Ma firmwares for core101-82 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
  - amdgpu: DMCUB updates for various ASICs
  - qcom: Add firmwares for sm8150 GPU
  - qcom: Add firmwares for sm8450 GPU
  - qcom: Add firmwares for sm8550 GPU
  - qcom: Add firmwares for sm8650 GPU
  - qcom: Add firmwares for sm8750 GPU
  - Makefile: add licence header
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - cirrus: cs35l41: Add support for new HP laptops
  - Revert "amdgpu: update GC 11.5.0 firmware"
  - linux-firmware: Update amd-ucode copyright information
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: Update firmware file for Intel Scorpius core
  - linux-firmware: Update firmware file for Intel BlazarIGfP core
  - linux-firmware: Update firmware file for Intel BlazarI core
  - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
  - ath11k: QCA2066 hw2.1: update board-2.bin
  - qcom: update ADSP firmware for x1e80100 platform, change the license
  - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
  - Reapply "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update SMU 14.0.3 firmware"
  - Revert "amdgpu: update GC 10.3.6 firmware"
  - Revert "amdgpu: update GC 11.5.1 firmware"
  - linux-firmware: update firmware for MT7925 WiFi device
  - mediatek MT7925: update bluetooth firmware to 20251124093155
  - intel_vpu: Update NPU firmware
  - WHENCE: fix version string for video firmware
  - qcom: vpu: update video firmware binary for SM8250
  - xe: Update GUC to v70.54.0 for BMG, PTL
  - Revert "amdgpu: update GC 11.0.1 firmware"
  - QCA: Add Bluetooth firmware for WCN685x uart interface
  - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
  - qcom: venus-5.4: update firmware binary for v5.4
  - qcom: venus-5.4: remove unused firmware file
  - iwlwifi: add Sc/Wh FW for core98-181 release
  - amdgpu: DMCUB updates for various ASICs
  - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
  - ASoC: tas2781: Add more symbol links on SPI devices
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update renoir firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: update VCN 5.0.0 firmware
  - amdgpu: update SMU 14.0.3 firmware
  - amdgpu: update PSP 14.0.3 firmware
  - amdgpu: update GC 12.0.1 firmware
  - amdgpu: update SMU 14.0.2 firmware
  - amdgpu: update PSP 14.0.2 firmware
  - amdgpu: update GC 12.0.0 firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update smu 13.0.0 kicker firmware
  - amdgpu: update PSP 13.0.0 kicker firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update VCN 5.0.1 firmware
  - amdgpu: update PSP 13.0.12 firmware
  - amdgpu: update GC 9.5.0 firmware
  - amdgpu: update PSP 13.0.14 firmware
  - amdgpu: update GC 9.4.4 firmware
  - amdgpu: update PSP 14.0.5 firmware
  - amdgpu: update GC 11.5.3 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.3 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add vce1 firmware
  - mediatek MT7922: update bluetooth firmware to 20251118163447
  - linux-firmware: update firmware for MT7922 WiFi device
  - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
  - qcom: add ADSP, CDSP firmware for sm8750 platform
  - rtl_nic: add firmware rtl9151a-1
  - qcom: Update aic100 firmware files
  - mt76: add firmware for MT7990
  - mt76: update firmware for MT7992
  - mt76: update firmware for MT7996
  - cirrus: cs35l57: Add firmware for a few Dell products
  - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
  - qcom: Add sdx35 Foxconn vendor firmware image file
  - linux-firmware: Update AMD cpu microcode
  - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
  Resolves: RHEL-119866


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-2
changelog:
  - Add auditd.cron (5) man page for time-based log rotation description
    Resolves: RHEL-77141
  - Remove HALT from space_left_action
  - Broadcast warning to users when auditd is about to halt
    Resolves: RHEL-73111
  - Fix TTY hostname in log messages
    Resolves: RHEL-79476
  - permtab: remove unsupported syscalls from rules
    Resolves: RHEL-59560
  - Restore permission on audit.rules


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-1
changelog:
  - Rebase to 1.5.0
  - "minimal" profile was removed and replaced with "local". (rhbz#2253180)
  - "local" profile is now default (rhbz#2253180)


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:5.1.9-7
changelog:
  - RHEL-39412 - Remove autofs dependency on libnsl2
    - remove BuildRequires: libnsl2-devel.
  - Resolves: RHEL-39412


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-9
changelog:
  - RHEL-32639 - [10.0-beta] starting autofs leads to core dump
    - bring the existing patches up to date with upstream.
      - update the configure script.
      - the two existing patches were renamed upstream.
        autofs-configure-c99.patch => autofs-5.1.9-fix-ldap_parse_page_control-check.patch.
        autofs-c99.patch => autofs-5.1.9-Fix-incompatible-function-pointer-types-in-cyrus-sasl-module.patch
    - fix crash in make_options_string().
  - Resolves: RHEL-32639


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-10
changelog:
  - Upstream bug fix sync.
    - fix always recreate credential cache.
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
    - fix amd external mount error handling.
    - fix amd external mount mount handling.
    - don't free ext mount if mounted.
    - refactor amd function do_program_mount().
    - refactor umount_amd_ext_mount().
    - add flags argument to amd do_program_mount().
    - fix amd cache options not copied.
    - seperate amd mount and entry flags.
    - make iocl ops ->timeout() handle per-dentry expire.
    - refactor amd mount options handling.
    - add some unimplemented amd map options.


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-12
changelog:
  - RHEL-87525 - autofs hang - autofs-5.1.4-114.el8_10.2 [rhel-10]
    - fix submount shutdown race.
    - fix deadlock in master_notify_submount().
    - fix lock ordering deadlock in expire_cleanup().
  - Resolves: RHEL-87525


author: Ian Kent <ikent@redhat.com> - 1:5.1.9-13
changelog:
  - RHEL-90571 - autofs: segfault while dereferencing null mapent [rhel-10]
    - fix handling of ignored offsets.
    - fix invalidated map entry handling in hosts module.
  - Resolves: RHEL-90571


author: Andrea Bolognani <abologna@redhat.com> - 2.41-54
changelog:
  - Fix BuildRequires for non-gold architectures.  (RHEL-85855)
  - Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101.1
changelog:
  - Temporarily generate the directory-hash files in %install ...(next item)
  - Add list of ghost files from directory-hash to %files


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-101.2
changelog:
  - update-ca-trust: copy directory-hash symlinks to /etc/pki/tls/certs
  - Remove /etc/pki/tls/cert.pem symlink so that it isn't loaded by default


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-102.5
changelog:
  - Bring back openssl trusted format bundle as well (Resolves: RHEL-109484)
  - Restored the following symlinks:
  	* /etc/pki/tls/cert.pem
  	* /etc/pki/tls/certs/ca-certificates.crt
  	* /etc/pki/tls/certs/ca-bundle.trust.crt
  	* /etc/pki/tls/certs/ca-bundle.crt
  	* /etc/ssl/cert.pem
  	* /etc/ssl/certs/ca-certificates.crt
  	* /etc/ssl/certs/ca-bundle.trust.crt
  	* /etc/ssl/certs/ca-bundle.crt
  - add libffi


author: rhel-developer-toolbox <krenzelok.frantisek@gmail.com> - 2025.2.80_v9.0.305-101
changelog:
  - Update to CKBI 2.80_v9.0.305 from NSS 3.114
  -    Adding:
  -     # Certificate "TWCA CYBER Root CA"
  -     # Certificate "TWCA Global Root CA G2"
  -     # Certificate "SecureSign Root CA12"
  -     # Certificate "SecureSign Root CA14"
  -     # Certificate "SecureSign Root CA15"
  -     # Certificate "D-TRUST BR Root CA 2 2023"
  -     # Certificate "TrustAsia SMIME ECC Root CA"
  -     # Certificate "TrustAsia SMIME RSA Root CA"
  -     # Certificate "TrustAsia TLS ECC Root CA"
  -     # Certificate "TrustAsia TLS RSA Root CA"
  -     # Certificate "D-TRUST EV Root CA 2 2023"
  -     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
  -     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"
  -     # Certificate "Sectigo Public Code Signing Root R46"
  -     # Certificate "Sectigo Public Code Signing Root E46"


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61876)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65843)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-2
changelog:
  - improve description of refresh directive (RHEL-91788)
  - improve logging of selection failures (RHEL-91787 RHEL-91789 RHEL-91791)
  - fix sourcedir reloading to not multiply sources (RHEL-95017)


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.5-1
changelog:
  - rebase to latest upstream version
  - sync i18n patch with SUSE (Kudos to Berny Völker!)
  - add some test dependencies to execute additional part of the upstream test-suite
  - enable LTO on ppc64le (RHEL-39977)


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: Veronika Hanulikova <vhanulik@redhat.com> - 2.9.11-7
changelog:
  - Add missing man page for create-cracklib-dict (RHEL-39972)
  - Preserve special characters in cracklib-format (RHEL-39972)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250424-1.git9267dee
changelog:
  - LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
  - drop crypto-policies-pq-preview subpackage, TEST-PQ goes into main one
  - NO-PQ: introduce
  - openssl: fix enabling integrity-only ciphersuites (still need min_rsa_size=0)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250602-1.gita6d4d0c
changelog:
  - openssl: fix mistakes in integrity-only cipher definitions
  - FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
  - AD-SUPPORT-LEGACY: resurrect subpolicy as present in RHEL-9


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250714-1.git95bf40e
changelog:
  -  sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
  -  sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
  -  sequoia: Add PQC algorithm
  -  sequoia: Do not include EdDSA in FIPS policy
  -  sequoia: Generate AEAD policy
  -  openssl: send one PQ and one classic key_share; prioritize PQ groups
  -  FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
  -  python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
  -  gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250905-1.gitc7eb7b2
changelog:
  - rpm-sequoia: enable MLDSA65-ED25519 and MLDSA87-ED448 in all policies
  - rpm-sequoia: force enable all PQ algorithms for now


author: Alexander Sosedkin <asosedkin@redhat.com> - 20251126-1.git918f03d
changelog:
  - openssl: let TLS 1.3 brainpool groups get used for key shares
  - openssh: support mlkem768nistp256-sha256 and mlkem1024nistp384-sha384
  - FUTURE: disable non-PQ groups, keep ML-KEM only
  - sequoia: register "eddsa" as an alias to EDDSA-ED25519


author: Ondrej Kozina <okozina@redhat.com> - 2.7.0-2
changelog:
  - Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
  - patch: Do not compile unused internal argon2 implementation


author: Ondrej Kozina <okozina@redhat.com> - 2.7.5-1
changelog:
  - Update to cryptsetup 2.7.5
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - Resolves: RHEL-57036 RHEL-57037 RHEL-61581


author: Kristina Hanicova <khanicov@redhat.com> - 2.8.1-2
changelog:
  - patch: opal: Submit PSID reset command to R/W file descriptor.
  - patch: Read integrity profile info from top level device.
  - patch: Fix possible use of uninitialized variable.
  - patch: Reinstate pbkdf serialization flag in device activation.
  - patch: Fix LUKS2 device status in inline HW mode and detached header.
  - patch: Set inline integrity flag if no underlying dm-integrity device.
  - patch: Fix wrong device size status reports in cryptsetup and integritysetup.
  - Resolves: RHEL-122285 RHEL-125150 RHEL-125155 RHEL-125166 RHEL-132584 RHEL-140107


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
changelog:
  - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
  - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-12
changelog:
  - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-13
changelog:
  - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-15
changelog:
  - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Jeff Moyer <jmoyer@redhat.com> - 80-4
changelog:
  - Fix listing of region capabilities (Jeff Moyer)
  - Remove orphaned patch file (Jeff Moyer)
  - Resolves: RHEL-80436


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)
  - drop sil-mingzat-fonts recommends from fonts-en
  - use Hebrew fonts for Yiddish (#2284093)


author: Akira TAGOH <tagoh@redhat.com> - 4.1-2
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-7
changelog:
  - Add 0018-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0019-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0020-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0021-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0022-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0023-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0024-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0025-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0026-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0027-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  - Add 0028-multipath-clean-up-find_multipaths-documentation.patch
  - Add 0029-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82180 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-82180


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-9
changelog:
  - Add 0030-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
  - Add 0031-libmultipath-add-helper-function-check_path_wwid_cha.patch
  - Add 0032-multipathd-re-add-paths-skipped-because-they-were-of.patch
    * Fixes RHEL-82535 ("multipathd does not monitor multipath devices
      created externally while there are offline paths.")
  - Resolves: RHEL-82535


author: Filip Suba <fsuba@redhat.com> - 0.9.9-11
changelog:
  - Add 0033-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
    * Fixes RHEL-103112 ("Update multipath builtin config to add new
      device defaults [rhel-10]")
  - Resolves: RHEL-103112


author: Lin Li <lilin@redhat.com> - 0.9.9-12
changelog:
  Add 0034-libmultipath-fix-crash-in-print_foreign_topology.patch
    * Fixes RHEL-107436 ("Running multipath -ll on system with "enable_foreign
      nvme" results in segfault")
  Resolves: RHEL-107436


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-13
changelog:
  - Add 0035-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
  - Add 0036-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
  - Add 0037-libmpathpersist-check-released-key-against-the-reser.patch
  - Add 0038-multipathd-remove-thread-from-mpath_pr_event_handle.patch
  - Add 0039-libmpathpersist-remove-uneeded-wrapper-function.patch
  - Add 0040-libmpathpersist-reduce-log-level-for-persistent-rese.patch
  - Add 0041-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
  - Add 0042-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
  - Add 0043-libmpathpersist-limit-changing-prflag-in-update_map_.patch
  - Add 0044-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
  - Add 0045-libmpathpersist-remove-useless-function-send_prout_a.patch
  - Add 0046-libmpathpersist-redesign-failed-release-workaround.patch
  - Add 0047-libmpathpersist-fail-the-release-if-all-threads-fail.patch
  - Add 0048-libmpathpersist-Handle-changing-key-corner-case.patch
  - Add 0049-libmpathpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
  - Add 0050-libmultipath-rename-prflag_value-enums.patch
  - Add 0051-libmpathpersist-use-a-switch-statement-for-prout-com.patch
  - Add 0052-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
  - Add 0053-libmpathpersist-remove-update_map_pr-code-for-NULL-p.patch
  - Add 0054-libmpathpersist-move-update_map_pr-to-multipathd.patch
  - Add 0055-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
  - Add 0056-libmpathpersist-clean-up-duplicate-function-declarat.patch
  - Add 0057-multipathd-wrap-setting-and-unsetting-prflag.patch
  - Add 0058-multipathd-unregister-PR-key-when-path-is-restored-i.patch
  - Add 0059-libmpathpersist-Fix-up-reservation_key-checking.patch
  - Add 0060-libmpathpersist-change-how-reservation-conflicts-are.patch
  - Add 0061-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
  - Add 0062-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
  - Add 0063-libmpathpersist-Restore-old-reservation-key-on-failu.patch
  - Add 0064-libmpathpersist-update-reservation-key-before-checki.patch
  - Add 0065-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
  - Add 0066-libmpathpersist-Don-t-always-fail-registrations-for-.patch
  - Add 0067-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
  - Add 0068-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
  - Add 0069-libmpathpersist-reregister-keys-when-self-preempting.patch
  - Add 0070-libmpathpersist-handle-updating-key-race-condition.patch
  - Add 0071-libmpathpersist-handle-preempting-all-registrants-re.patch
  - Add 0072-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
  - Add 0073-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
  - Add 0074-libmpathpersist-use-check_holding_reservation-in-mpa.patch
  - Add 0075-libmpathpersist-Fix-unregistering-while-holding-the-.patch
  - Add 0076-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
  - Add 0077-multipathd-Fix-tracking-of-old-PR-key.patch
    * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
      reservation handling [rhel-10]")
  - Resolves: RHEL-118720


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-14
changelog:
  - Add 0078-multipathd-Fix-race-while-registering-PR-key.patch
  - Add 0079-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
    * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
      reservation handling [rhel-10]")
  - Resolves: RHEL-118720


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-15
changelog:
  - Add 0080-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
    * Fixes RHEL-128338 ("Update the multipath.conf stanza for Infinidat
      storage")
  - Resolves: RHEL-128338


author: Than Ngo <than@redhat.com> - 3.10-1
changelog:
  - Fix bz#2208831, update to 3.10
  - Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9


author: Evan Goode <egoode@redhat.com> - 4.20.0-15
changelog:
  - Mark transient transactions in DNF history (RHEL-84515)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501)


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Pavel Valena <pvalena@redhat.com> - 102-3
changelog:
  - revert(dracut-init.sh): add module to mods_to_load before checking dependencies
  - fix(squash): remove cyclic dependency
  - fix(dracut.sh): exit when installing the squash loader fails
  - fix(squash-lib): harden against empty $initdir
    Resolves: RHEL-43460


author: Pavel Valena <pvalena@redhat.com> - 103-1
changelog:
  - Update to dracut 103.
  - feat(fips-crypto-policies): make c-p follow FIPS mode automatically
  - fix(fips-crypto-policies): make it depend on fips dracut module
    Resolves: RHEL-59678,RHEL-65204


author: Pavel Valena <pvalena@redhat.com> - 105-1
changelog:
  - build: upgrade to dracut 105
  - fix(systemd-ask-password): do not half-install systemd-ask-password-wall
  - fix(pcsc): add libpcsclite_real.so.*
  - revert: "fix(rescue): make rescue always no-hostonly"
  - fix(dracut-install): initize fts pointer
  - feat: add openssl module
  - build: make erofs the default requirement for squash subpackage
    Resolves: RHEL-65204,RHEL-68935,RHEL-76323


author: Pavel Valena <pvalena@redhat.com> - 107-2
changelog:
  - fix: improve hostonly sloppy mode
  - fix(dracut.sh): don't pass empty string as dir
  - feat(systemd): drop unnecessary dependency on libgcrypt
  - fix(kernel-modules-extra): remove stray  before /
  - Revert "fix(base): do not require chroot inside initramfs"
  - fix: let check_vol_slaves_all return 1 when checks on all slaves fail
  - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
  - fix(74nvmf): set root=nvmf
    Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897


author: Pavel Valena <pvalena@redhat.com> - 107-3
changelog:
  - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
  - test: fixup NFS test.sh
    Resolves: RHEL-108215,RHEL-97473


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.3.0-2
changelog:
  - Install module initialization script for fish as configuration snippet for
    this shell via alternatives (#2196379)


author: Abhi Das <adas@redhat.com> - 1.8.2-2
changelog:
  - Rebase to 1.8.2-2 for zstd and multithreading support and
    Remove erroneously added gating.yaml
    Resolves: RHEL-68370


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-65532)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-73475)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-73585)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.1-12
changelog:
  - Release bump due to internal issue with the build system (missing debug symbols)
    Related: RHEL-24118


author: Akira TAGOH <tagoh@redhat.com> - 20240101-4
changelog:
  - Updates to monthly release of 24.1.1
  - Remove substitute config for Symbol.
    Resolves: rhbz#2259962


author: Akira TAGOH <tagoh@redhat.com> - 20240201-2
changelog:
  - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
    Resolves: rhbz#2265259


author: Akira TAGOH <tagoh@redhat.com> - 20240301-3
changelog:
  - Add google-noto-fonts-all, google-noto-fonts-all-vf, and
    google-noto-fonts-all-static meta packages.


author: Akira TAGOh <tagoh@redhat.com> - 20240401-4
changelog:
  - Fix a typo in config.
  - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
  - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
    Resolves: RHEL-47289


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Nicolas Frayer <nfrayer@redhat.com> 2.12-30
changelog:
  - gating.yaml: Update gating tests as there was a change in where
  test composes are kept
  - Resolves: #RHEL-114488


author: Nicolas Frayer <nfrayer@redhat.com> 2.12-35
changelog:
  - mkimage/appendedsig: Fix grub-mkimage with an unaligned appended signature size
  - Related: #RHEL-24510


author: Leo Sandoval <lsandova@redhat.com> - 8.40-81
changelog:
  - grubby-bls: in s390* systems, run zipl on grub cfg update event
    Fixes previous commit and formats better the conditions that trigger grub cfg updates
    Resolves: #RHEL-36092


author: Jakub Martisko <jamartis@redhat.com> - 1.13-1
changelog:
  - Rebase to gzip 1.13
  - There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
  - Revert the s390x build options in the next release
  Resolves: rhbz#2232890


author: Coiby Xu <coxu@redhat.com> - 1.6.2-4
changelog:
  - ima-setup: Use RSAHEADER to tell if a package has been signed
  - ima-setup: skip installing rpm-plugin-ima if it has been installed (RHEL-99356)
  - ima-setup: rebuild all initramfs images to include the integrity dracut module (RHEL-92638)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Jan Macku <jamacku@redhat.com> - 10.18-1
changelog:
  - Translated using Weblate (English (United Kingdom))
  - migrate to SPDX license
  - ci(Mergify): configuration update
  - Translated using Weblate (German)
  - Translated using Weblate (English (United Kingdom))
  - doc: update badges
  - ci(lint): Add Differential PyLint GitHub Action
  - ci(lint): Add permission `security-events: write`
  - ci: Update Differential ShellCheck to `@v4`
  - doc: fix markdown warnings and update badge
  - ci: Setup CodeQL to replace deprecated LGTM
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck


author: Jan Macku <jamacku@redhat.com> - 10.19-1
changelog:
  - ci: update Packit configuration
  - spec: add missing changelog entry
  - Revert "releng: Enable Packit to handle Fedora updates"
  - Revert "releng: Convert to rpmautospec"
  - doc: update translations
  - spec: remove changelog


author: Jan Macku <jamacku@redhat.com> - 10.20-1
changelog:
  - Translated using Weblate (Georgian)
  - Add -r to while read as per shellcheck
  - Fix splitting spaces in paths from statetab files
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - Translated using Weblate (Portuguese (Brazil))
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - build(deps): bump actions/checkout from 3 to 4
  - Translated using Weblate (Hungarian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (Korean)


author: Jan Macku <jamacku@redhat.com> - 10.21-1
changelog:
  - fedora: don't build network-scripts rpm in f40+ (2/2)
  - ci: trigger copr build on every push to main branch
  - ifup-routes: print warning when ADDRESS0 entry is missing
  - fedora: don't build network-scripts rpm in f40+


author: Jan Macku <jamacku@redhat.com> - 10.22-1
changelog:
  - Translated using Weblate (Georgian)
  - rename_device: free path after it is used
  - rename_device: remove trailing whitespaces


author: Jan Macku <jamacku@redhat.com> - 10.26-1
changelog:
  - Translated using Weblate (Turkish)
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - Translated using Weblate (Turkish)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.25-4
changelog:
  - replace iotop https://fedoraproject.org/wiki/Changes/Replace_iotop_with_iotop-c
  - iotop-c executable renamed back to iotop


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Phil Sutter <psutter@redhat.com> [1.8.11-4.el10]
changelog:
  - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
  - spec: Use bcond macro (Phil Sutter) [RHEL-67473]


author: Phil Sutter <psutter@redhat.com> [1.8.11-6.el10]
changelog:
  - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
  - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]


author: Phil Sutter <psutter@redhat.com> [1.8.11-9.el10]
changelog:
  - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
  - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]


author: Jan Macku <jamacku@redhat.com> - 20240905-3
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94582)


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-182.el10]
changelog:
  - KVM: selftests: Add missing "break" in rseq_test's param parsing (Gavin Shan) [RHEL-130521]
  - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139289] {CVE-2025-40248}
  - dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-138352]
  - dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-138352]
  - net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate (CKI Backport Bot) [RHEL-117719]
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Adrian Moreno) [RHEL-134732]
  - dm: Fix deadlock when reloading a multipath table (Ming Lei) [RHEL-134975]
  - block: Remove queue freezing from several sysfs store callbacks (Ming Lei) [RHEL-134975]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-183.el10]
changelog:
  - block: fix race between wbt_enable_default and IO submission (Ming Lei) [RHEL-128456]
  - block: relax atomic write boundary vs chunk size check (Ming Lei) [RHEL-129479]
  - block: fix stacking of atomic writes when atomics are not supported (Ming Lei) [RHEL-129479]
  - block: update validation of atomic writes boundary for stacked devices (Ming Lei) [RHEL-129479]
  - block: use chunk_sectors when evaluating stacked atomic write limits (Ming Lei) [RHEL-129479]
  - block: sanitize chunk_sectors for atomic write limits (Ming Lei) [RHEL-129479]
  - ilog2: add max_pow_of_two_factor() (Ming Lei) [RHEL-129479]
  - mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134453] {CVE-2025-40258}
  - x86/CPU/AMD: Extend Zen6 model range (Steve Best) [RHEL-128696]
  - pinctrl: PINCTRL_AMDISP should depend on DRM_AMD_ISP (Steve Best) [RHEL-107607]
  - pinctrl: amd: Clear GPIO debounce for suspend (Steve Best) [RHEL-107607]
  - pinctrl: amd: Constify pointers to 'pinctrl_desc' (Steve Best) [RHEL-107607]
  - pinctrl: amd: Fix hibernation support with CONFIG_SUSPEND unset (Steve Best) [RHEL-107607]
  - pinctrl: amd: Fix use of undeclared identifier 'pinctrl_amd_s2idle_dev_ops' (Steve Best) [RHEL-107607]
  - pinctrl: amd: Add an LPS0 check() callback (Steve Best) [RHEL-107607]
  - pinctrl: amd: isp411: Fix IS_ERR() vs NULL check in probe() (Steve Best) [RHEL-107607]
  - pinctrl: amd: isp411: Add amdisp GPIO pinctrl (Steve Best) [RHEL-107607]
  - pinctrl: amd: Take suspend type into consideration which pins are non-wake (Steve Best) [RHEL-107607]
  - pinctrl: amd: Fix two small typos (Steve Best) [RHEL-107607]
  - RDMA/uverbs: Fix umem release in UVERBS_METHOD_CQ_CREATE (Kamal Heib) [RHEL-109943]
  - RDMA/efa: Add CQ with external memory support (Kamal Heib) [RHEL-109943]
  - IB/sa: Fix sa_local_svc_timeout_ms read race (Kamal Heib) [RHEL-109943]
  - RDMA/core: Resolve MAC of next-hop device without ARP support (Kamal Heib) [RHEL-109943]
  - RDMA/cm: Rate limit destroy CM ID timeout error message (Kamal Heib) [RHEL-109943]
  - IB: Extend UVERBS_METHOD_REG_MR to get DMAH (Kamal Heib) [RHEL-109943]
  - RDMA/core: Introduce a DMAH object and its alloc/free APIs (Kamal Heib) [RHEL-109943]
  - IB/core: Add UVERBS_METHOD_REG_MR on the MR object (Kamal Heib) [RHEL-109943]
  - RDMA/core: Add umem "is_contiguous" and "start_dma_addr" helpers (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Add a common way to create CQ with umem (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (Kamal Heib) [RHEL-109943]
  - IB/cm: Use separate agent w/o flow control for REP (Kamal Heib) [RHEL-109943]
  - IB/mad: Add flow control for solicited MADs (Kamal Heib) [RHEL-109943]
  - IB/mad: Add state machine to MAD layer (Kamal Heib) [RHEL-109943]
  - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (Kamal Heib) [RHEL-109943]
  - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (Kamal Heib) [RHEL-109943]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-109943]
  - RDMA/ipoib: Use parent rdma device net namespace (Kamal Heib) [RHEL-109943]
  - RDMA/core: Extend RDMA device registration to be net namespace aware (Kamal Heib) [RHEL-109943]
  - RDMA/core: reduce stack using in nldev_stat_get_doit() (Kamal Heib) [RHEL-109943]
  - RDMA/core: Add driver APIs pre_destroy_cq() and post_destroy_cq() (Kamal Heib) [RHEL-109943]
  - IB/iser: Remove unnecessary local variable (Kamal Heib) [RHEL-109943]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-184.el10]
changelog:
  - blk-mq: skip CPU offline notify on unmapped hctx (Ming Lei) [RHEL-140153]
  - mm/rmap: fix soft-dirty and uffd-wp bit loss when remapping zero-filled mTHP subpage to shared zeropage (Aristeu Rozanski) [RHEL-122951]
  - mm/thp: fix MTE tag mismatch when replacing zero-filled subpages (Aristeu Rozanski) [RHEL-122951]
  - io_uring/net: ensure vectored buffer node import is tied to notification (Jeff Moyer) [RHEL-136780]
  - bpf, arm64: Do not audit capability check in do_jit() (CKI Backport Bot) [RHEL-126124]
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area (Luiz Capitulino) [RHEL-122910]
  - netfilter: nf_conncount: update last_gc only when GC has been performed (Florian Westphal) [RHEL-133467]
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-133467]
  - netfilter: nf_nat: remove bogus direction check (Florian Westphal) [RHEL-133467]
  - ipvs: fix ipv4 null-ptr-deref in route error path (Florian Westphal) [RHEL-133467]
  - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH (Florian Westphal) [RHEL-133467]
  - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan (Florian Westphal) [RHEL-133467]
  - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-133467]
  - netfilter: nft_connlimit: fix possible data race on connection count (Florian Westphal) [RHEL-133467]
  - netfilter: nft_ct: enable labels for get case too (Florian Westphal) [RHEL-133467]
  - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-133467]
  - netfilter: nf_conntrack: do not skip entries in /proc/net/nf_conntrack (Florian Westphal) [RHEL-133467]
  - netfilter: nfnetlink: reset nlh pointer during batch replay (Florian Westphal) [RHEL-133467]
  - ipvs: Defer ip_vs_ftp unregister during netns cleanup (Florian Westphal) [RHEL-133467]
  - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable (Florian Westphal) [RHEL-133467]
  - x86/cpu: Add two Intel CPU model numbers (Steve Best) [RHEL-115112]
  - sched/hrtick: Fix hrtick() vs. scheduling context (Phil Auld) [RHEL-124642]
  - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out (Phil Auld) [RHEL-124642]
  - sched: Increase sched_tick_remote timeout (Phil Auld) [RHEL-124642]
  - bpf: Make migrate_disable always inline to avoid partial inlining (Phil Auld) [RHEL-124642]
  - sched/fair: Fix pelt lost idle time detection (Phil Auld) [RHEL-124642]
  - sched/deadline: Stop dl_server before CPU goes offline (Phil Auld) [RHEL-124642]
  - sched: Fix some typos in include/linux/preempt.h (Phil Auld) [RHEL-124642]
  - sched: Make migrate_{en,dis}able() inline (Phil Auld) [RHEL-124642]
  - rcu: Replace preempt.h with sched.h in include/linux/rcupdate.h (Phil Auld) [RHEL-124642]
  - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c (Phil Auld) [RHEL-124642]
  - sched/deadline: Fix dl_server behaviour (Phil Auld) [RHEL-124642]
  - sched/deadline: Fix dl_server getting stuck (Phil Auld) [RHEL-124642]
  - sched: Fix sched_numa_find_nth_cpu() if mask offline (Phil Auld) [RHEL-124642]
  - sched_ext: Add support for cgroup bandwidth control interface (Phil Auld) [RHEL-124642]
  - s390/processor: Use bitop functions for cpu flag helper functions (Phil Auld) [RHEL-124642]
  - s390/asm-offsets: Remove ASM_OFFSETS_C (Phil Auld) [RHEL-124642]
  - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127128]
  - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127128]
  - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127128]
  - redhat/configs: automotive: enable S32G_WDT (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g399a-rdb3: Enable the SWT watchdog (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g3: Add the Software Timer Watchdog (SWT) nodes (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g274-rd2: Enable the SWT watchdog (Jared Kangas) [RHEL-131327]
  - arm64: dts: s32g2: Add the Software Timer Watchdog (SWT) nodes (Jared Kangas) [RHEL-131327]
  - watchdog: Add the Watchdog Timer for the NXP S32 platform (Jared Kangas) [RHEL-131327]
  - dt-bindings: watchdog: Add NXP Software Watchdog Timer (Jared Kangas) [RHEL-131327]
  - xfs: rework datasync tracking and execution (Pavel Reichl) [RHEL-126220]
  - xfs: rearrange code in xfs_inode_item_precommit (Pavel Reichl) [RHEL-126220]
  - workqueue: fix texinfodocs warning for WQ_* flags reference (Waiman Long) [RHEL-129577]
  - workqueue: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-129577]
  - workqueue: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-129577]
  - workqueue: replace use of system_unbound_wq with system_dfl_wq (Waiman Long) [RHEL-129577]
  - workqueue: Provide a handshake for canceling BH workers (Waiman Long) [RHEL-129577]
  - workqueue: Remove rcu_read_lock/unlock() in wq_watchdog_timer_fn() (Waiman Long) [RHEL-129577]
  - workqueue: Remove redundant rcu_read_lock/unlock() in workqueue_congested() (Waiman Long) [RHEL-129577]
  - workqueue: Use atomic_try_cmpxchg_relaxed() in tryinc_node_nr_active() (Waiman Long) [RHEL-129577]
  - workqueue: Remove unused work_on_cpu_safe (Waiman Long) [RHEL-129577]
  - workqueue: Add new WQ_PERCPU flag (Waiman Long) [RHEL-129577]
  - workqueue: Add system_percpu_wq and system_dfl_wq (Waiman Long) [RHEL-129577]
  - workqueue: Basic memory allocation profiling support (Waiman Long) [RHEL-129577]
  - workqueue: fix opencoded cpumask_next_and_wrap() in wq_select_unbound_cpu() (Waiman Long) [RHEL-129577]
  - workqueue: Initialize wq_isolated_cpumask in workqueue_init_early() (Waiman Long) [RHEL-129577]
  - workqueue: fix typo in comment (Waiman Long) [RHEL-129577]
  - workqueue: Fix race condition in wq->stats incrementation (Waiman Long) [RHEL-129577]
  - workqueue: Better document teardown for delayed_work (Waiman Long) [RHEL-129577]
  - cpumask: drop cpumask_next_wrap_old() (Waiman Long) [RHEL-129577]
  - PCI: hv: Switch hv_compose_multi_msi_req_get_cpu() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - scsi: lpfc: rework lpfc_next_{online,present}_cpu() (Waiman Long) [RHEL-129577]
  - scsi: lpfc: switch lpfc_irq_rebalance() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - s390: switch stop_machine_yield() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - padata: switch padata_find_next() to using cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - cpumask: use cpumask_next_wrap() where appropriate (Waiman Long) [RHEL-129577]
  - cpumask: re-introduce cpumask_next{,_and}_wrap() (Waiman Long) [RHEL-129577]
  - cpumask: deprecate cpumask_next_wrap() (Waiman Long) [RHEL-129577]
  - powerpc/xmon: simplify xmon_batch_next_cpu() (Waiman Long) [RHEL-129577]
  - ibmvnic: simplify ibmvnic_set_queue_affinity() (Waiman Long) [RHEL-129577]
  - virtio_net: simplify virtnet_set_affinity() (Waiman Long) [RHEL-129577]
  - objpool: rework objpool_pop() (Waiman Long) [RHEL-129577]
  - cpumask: add for_each_{possible,online}_cpu_wrap (Waiman Long) [RHEL-129577]
  - workqueue: Log additional details when rejecting work (Waiman Long) [RHEL-129577]
  - workqueue: warn if delayed_work is queued to an offlined cpu. (Waiman Long) [RHEL-129577]
  - workqueue: add printf attribute to __alloc_workqueue() (Waiman Long) [RHEL-129577]
  - workqueue: Reduce expensive locks for unbound workqueue (Waiman Long) [RHEL-129577]
  - workqueue: Adjust WQ_MAX_ACTIVE from 512 to 2048 (Waiman Long) [RHEL-129577]
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128901] {CVE-2025-40141}
  - ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128474] {CVE-2025-40185}
  - redhat/configs: automotive: disable VFIO_PLATFORM (Eric Chanudet) [RHEL-79906]
  - net: renesas: rswitch: add mdio C22 support (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: use generic MPSM operation for mdio C45 (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: align mdio C45 operations with datasheet (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: use FIELD_PREP for remaining MPIC register fields (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: do not write to MPSM register at init time (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: remove speed from gwca structure (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: do not deinit disabled ports (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: rework ts tags management (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix initial MPIC register setting (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: enable only used MFWD features (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: handle stop vs interrupt race (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: avoid use-after-put for a device tree node (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix leaked pointer on error path (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix race window between tx start and complete (Radu Rendec) [RHEL-78089]
  - net: renesas: rswitch: fix possible early skb release (Radu Rendec) [RHEL-78089]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-185.el10]
changelog:
  - net: fix memory leak in skb_segment_list for GRO packets (Mohammad Heib) [RHEL-104436]
  - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (Hangbin Liu) [RHEL-133463]
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (Hangbin Liu) [RHEL-133463]
  - selftests: fib_tests: add fib6 from ra to static test (Hangbin Liu) [RHEL-133463]
  - ipv6: clear RA flags when adding a static route (Hangbin Liu) [RHEL-133463]
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Hangbin Liu) [RHEL-133463]
  - Documentation: RCU: Wrap kvm-remote.sh rerun snippet in literal code block (Čestmír Kalina) [RHEL-114406]
  - redhat: config: disable RCU_TORTURE_TEST_{CHK_RDR_STATE,LOG_CPU,LOG_GP} (Čestmír Kalina) [RHEL-114406]
  - refscale: Use kcalloc() instead of kzalloc() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Use kcalloc() instead of kzalloc() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Delay forward-progress testing until boot completes (Čestmír Kalina) [RHEL-114406]
  - torture: Delay CPU-hotplug operations until boot completes (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Delay rcutorture readers and writers until boot completes (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Suppress "Writer stall state" reports during boot (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Fix jitter.sh spin time (Čestmír Kalina) [RHEL-114406]
  - srcu/tiny: Remove preempt_disable/enable() in srcu_gp_start_if_needed() (Čestmír Kalina) [RHEL-114406]
  - Documentation: Fix RCU typos (Čestmír Kalina) [RHEL-114406]
  - rcu: add rcu_read_lock_dont_migrate() (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix racy re-initialization of irq_work causing hangs (Čestmír Kalina) [RHEL-114406]
  - refscale: Check that nreaders and loops multiplication doesn't overflow (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix delayed execution of hurry callbacks (Čestmír Kalina) [RHEL-114406]
  - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make BUSTED scenario check and log readers (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make Trivial RCU ignore onoff_interval and shuffle_interval (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Print number of RCU up/down readers and migrations (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Check for no up/down readers at task level (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Check for ->up_read() without matching ->down_read() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Complain if an ->up_read() is delayed more than 10 seconds (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Pull rcu_torture_updown() loop body into new function (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add tests for SRCU up/down reader primitives (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Print only one rtort_pipe_count splat (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Start rcu_torture_writer() after rcu_torture_reader() (Čestmír Kalina) [RHEL-114406]
  - torture: Make torture.sh --allmodconfig testing fail on warnings (Čestmír Kalina) [RHEL-114406]
  - torture: Add "ERROR" diagnostic for testing kernel-build output (Čestmír Kalina) [RHEL-114406]
  - torture: Make torture.sh tolerate runs having bad kvm.sh arguments (Čestmír Kalina) [RHEL-114406]
  - torture: Add textid.txt file to --do-allmodconfig and --do-rcu-rust runs (Čestmír Kalina) [RHEL-114406]
  - torture: Extract testid.txt generation to separate script (Čestmír Kalina) [RHEL-114406]
  - torture: Suppress "find" diagnostics from torture.sh --do-none run (Čestmír Kalina) [RHEL-114406]
  - torture: Provide EXPERT Kconfig option for arm64 KCSAN torture.sh runs (Čestmír Kalina) [RHEL-114406]
  - torture: Default --no-clocksourcewd on arm64 (Čestmír Kalina) [RHEL-114406]
  - torture: Default --no-rcutasksflavors on arm64 (Čestmír Kalina) [RHEL-114406]
  - torture: Make torture.sh KCSAN runs set CONFIG_RCU_TORTURE_TEST_CHK_RDR_STATE=y (Čestmír Kalina) [RHEL-114406]
  - torture: Permit multiple space characters in kvm.sh --kconfig argument (Čestmír Kalina) [RHEL-114406]
  - torture: Suppress torture.sh "Zero time" messages for disabled tests (Čestmír Kalina) [RHEL-114406]
  - rcu: Document concurrent quiescent state reporting for offline CPUs (Čestmír Kalina) [RHEL-114406]
  - rcu: Document separation of rcu_state and rnp's gp_seq (Čestmír Kalina) [RHEL-114406]
  - rcu: Document GP init vs hotplug-scan ordering requirements (Čestmír Kalina) [RHEL-114406]
  - rcu: Refactor expedited handling check in rcu_read_unlock_special() (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (Čestmír Kalina) [RHEL-114406]
  - Documentation/kernel-parameters: Update rcu_normal_wake_from_gp doc (Čestmír Kalina) [RHEL-114406]
  - rcu: Enable rcu_normal_wake_from_gp on small systems (Čestmír Kalina) [RHEL-114406]
  - rcu: Protect ->defer_qs_iw_pending from data race (Čestmír Kalina) [RHEL-114406]
  - rcu: Robustify rcu_is_cpu_rrupt_from_idle() (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Warn on QS requested on dying CPU (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Remove needless CPU up quiescent state report (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Remove confusing needless full barrier on task unblock (Čestmír Kalina) [RHEL-114406]
  - rcu/exp: Protect against early QS report (Čestmír Kalina) [RHEL-114406]
  - rcu: Move rcu_stall related sysctls into rcu/tree_stall.h (Čestmír Kalina) [RHEL-114406]
  - rcu: Return early if callback is not specified (Čestmír Kalina) [RHEL-114406]
  - kernel/rcu/tree_stall: add /sys/kernel/rcu_stall_count (Čestmír Kalina) [RHEL-114406]
  - kernel/rcu/tree_stall: add /sys/kernel/rcu_stall_count (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Perform more frequent testing of ->gpwrap (Čestmír Kalina) [RHEL-114406]
  - torture: Add testing of RCU's Rust bindings to torture.sh (Čestmír Kalina) [RHEL-114406]
  - torture: Add --do-{,no-}normal to torture.sh (Čestmír Kalina) [RHEL-114406]
  - checkpatch: Deprecate srcu_read_lock_lite() and srcu_read_unlock_lite() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Comment invocations of tick_dep_set_task() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make torture.sh --do-rt use CONFIG_PREEMPT_RT (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Split out beginning and end from rcu_torture_one_read() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make srcu_lockdep.sh check reader-conflict handling (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make srcu_lockdep.sh check kernel Kconfig (Čestmír Kalina) [RHEL-114406]
  - srcu: Use rcu_seq_done_exact() for polling API (Čestmír Kalina) [RHEL-114406]
  - rcu: Comment on the extraneous delta test on rcu_seq_done_exact() (Čestmír Kalina) [RHEL-114406]
  - rcu: Add warning to ensure rcu_seq_done_exact() is working (Čestmír Kalina) [RHEL-114406]
  - rcu: Replace magic number with meaningful constant in rcu_seq_done_exact() (Čestmír Kalina) [RHEL-114406]
  - rcuscale: using kcalloc() to relpace kmalloc() (Čestmír Kalina) [RHEL-114406]
  - doc/RCU/listRCU: refine example code for eliminating stale data (Čestmír Kalina) [RHEL-114406]
  - doc: Update LWN RCU API links in whatisRCU.rst (Čestmír Kalina) [RHEL-114406]
  - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture (Čestmír Kalina) [RHEL-114406]
  - Revert "rcu/nocb: Fix rcuog wake-up from offline softirq" (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove swake_up_one_online() bandaid (Čestmír Kalina) [RHEL-114406]
  - rcu-tasks: Always inline rcu_irq_work_resched() (Čestmír Kalina) [RHEL-114406]
  - srcu: Make FORCE_NEED_SRCU_NMI_SAFE depend on RCU_EXPERT (Čestmír Kalina) [RHEL-114406]
  - types: move struct rcuwait into types.h (Čestmír Kalina) [RHEL-114406]
  - torture: Make SRCU lockdep testing use srcu_read_lock_nmisafe() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add FORCE_NEED_SRCU_NMI_SAFE Kconfig for testing (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Complain when invalid SRCU reader_flavor is specified (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Move RCU_TORTURE_TEST_{CHK_RDR_STATE,LOG_CPU} to bool (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make cur_ops->format_gp_seqs take buffer length (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add ftrace-compatible timestamp to GP# failure/close-call output (Čestmír Kalina) [RHEL-114406]
  - rcu: Trace expedited grace-period numbers in hexadecimal (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Expand failure/close-call grace-period output (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Include grace-period sequence numbers in failure/close-call (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add a test_boost_holdoff module parameter (Čestmír Kalina) [RHEL-114406]
  - torture: Add get_torture_init_jiffies() for test-start time (Čestmír Kalina) [RHEL-114406]
  - srcu: Make SRCU-fast also be NMI-safe (Čestmír Kalina) [RHEL-114406]
  - srcu: Add srcu_down_read_fast() and srcu_up_read_fast() (Čestmír Kalina) [RHEL-114406]
  - srcu: Document that srcu_{read_lock,down_read}() can share srcu_struct (Čestmír Kalina) [RHEL-114406]
  - srcu: Fix srcu_read_unlock_{lite,nmisafe}() kernel-doc (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make scenario SRCU-P use srcu_read_lock_fast() (Čestmír Kalina) [RHEL-114406]
  - refscale: Add srcu_read_lock_fast() support using "srcu-fast" (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add ability to test srcu_read_{,un}lock_fast() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add SRCU-fast readers (Čestmír Kalina) [RHEL-114406]
  - srcu: Move SRCU Tree/Tiny definitions from srcu.h (Čestmír Kalina) [RHEL-114406]
  - srcu: Pull integer-to-pointer conversion into __srcu_ctr_to_ptr() (Čestmír Kalina) [RHEL-114406]
  - srcu: Pull pointer-to-integer conversion into __srcu_ptr_to_ctr() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add SRCU_READ_FLAVOR_SLOWGP to flag need for synchronize_rcu() (Čestmír Kalina) [RHEL-114406]
  - srcu: Rename srcu_check_read_flavor_lite() to srcu_check_read_flavor_force() (Čestmír Kalina) [RHEL-114406]
  - srcu: Force synchronization for srcu_get_delay() (Čestmír Kalina) [RHEL-114406]
  - srcu: Make Tree SRCU updates independent of ->srcu_idx (Čestmír Kalina) [RHEL-114406]
  - srcu: Make SRCU readers use ->srcu_ctrs for counter selection (Čestmír Kalina) [RHEL-114406]
  - srcu: Pull ->srcu_{un,}lock_count into a new srcu_ctr structure (Čestmír Kalina) [RHEL-114406]
  - srcu: Use ->srcu_gp_seq for rcutorture reader batch (Čestmír Kalina) [RHEL-114406]
  - srcu: Define SRCU_READ_FLAVOR_ALL in terms of symbols (Čestmír Kalina) [RHEL-114406]
  - srcu: Make Tiny SRCU able to operate in preemptible kernels (Čestmír Kalina) [RHEL-114406]
  - rcu: Use _full() API to debug synchronize_rcu() (Čestmír Kalina) [RHEL-114406]
  - rcu: Update TREE05.boot to test normal synchronize_rcu() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Allow a negative value for nfakewriters (Čestmír Kalina) [RHEL-114406]
  - context_tracking: Make RCU watch ct_kernel_exit_state() warning (Čestmír Kalina) [RHEL-114406]
  - rcu/nocb: Print segment lengths in show_rcu_nocb_gp_state() (Čestmír Kalina) [RHEL-114406]
  - rcu: Fix get_state_synchronize_rcu_full() GP-start detection (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove READ_ONCE() for rdp->gpwrap access in __note_gp_changes() (Čestmír Kalina) [RHEL-114406]
  - rcu: Split rcu_report_exp_cpu_mult() mask parameter and use for tracing (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make scenario TREE07 build CONFIG_PREEMPT_LAZY=y (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make scenario TREE10 build CONFIG_PREEMPT_LAZY=y (Čestmír Kalina) [RHEL-114406]
  - rcu: limit PREEMPT_RCU configurations (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Update ->extendables check for lazy preemption (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Update rcutorture_one_extend_check() for lazy preemption (Čestmír Kalina) [RHEL-114406]
  - rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y (Čestmír Kalina) [RHEL-114406]
  - rcu: handle unstable rdp in rcu_read_unlock_strict() (Čestmír Kalina) [RHEL-114406]
  - sched: update __cond_resched comment about RCU quiescent states (Čestmír Kalina) [RHEL-114406]
  - rcu: rename PREEMPT_AUTO to PREEMPT_LAZY (Čestmír Kalina) [RHEL-114406]
  - rcu: fix header guard for rcu_all_qs() (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove references to old grace-period-wait primitives (Čestmír Kalina) [RHEL-114406]
  - rcu: Clarify RCU_LAZY and RCU_LAZY_DEFAULT_OFF help text (Čestmír Kalina) [RHEL-114406]
  - rcu: Add CONFIG_RCU_LAZY delays to call_rcu() kernel-doc header (Čestmír Kalina) [RHEL-114406]
  - srcu: Point call_srcu() to call_rcu() for detailed memory ordering (Čestmír Kalina) [RHEL-114406]
  - rcu: Document self-propagating callbacks (Čestmír Kalina) [RHEL-114406]
  - docs: Improve discussion of this_cpu_ptr(), add raw_cpu_ptr() (Čestmír Kalina) [RHEL-114406]
  - doc: Add broken-timing possibility to stallwarn.rst (Čestmír Kalina) [RHEL-114406]
  - slab: don't batch kvfree_rcu() with SLUB_TINY (Čestmír Kalina) [RHEL-114406]
  - rcu, slab: use a regular callback function for kvfree_rcu (Čestmír Kalina) [RHEL-114406]
  - rcu: remove trace_rcu_kvfree_callback (Čestmír Kalina) [RHEL-114406]
  - slab, rcu: move TINY_RCU variant of kvfree_rcu() to SLAB (Čestmír Kalina) [RHEL-114406]
  - mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq (Čestmír Kalina) [RHEL-114406]
  - torture: Make kvm-remote.sh give up on unresponsive system (Čestmír Kalina) [RHEL-114406]
  - refscale: Add test for sched_clock() (Čestmír Kalina) [RHEL-114406]
  - srcu: Remove redundant GP sequence checks in srcu_funnel_gp_start (Čestmír Kalina) [RHEL-114406]
  - srcu: Fix typo s/srcu_check_read_flavor()/__srcu_check_read_flavor()/ (Čestmír Kalina) [RHEL-114406]
  - srcu: Guarantee non-negative return value from srcu_read_lock() (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Use symbols for SRCU reader flavors (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add per-reader-segment preemption diagnostics (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Read CPU ID for decoration protected by both reader types (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add preempt_count() to rcutorture_one_extend_check() diagnostics (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add parameters to control polled/conditional wait interval (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add documentation for recent conditional and polled APIs (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Ignore attempts to test preemption and forward progress (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make rcutorture_one_extend() check reader state (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Pretty-print rcutorture reader segments (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add full read-side contexts to "busted" torture type (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Decorate failing reader segments with last CPU ID (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Check preemption for failing reader (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add ->cond_sync_exp_full function to rcu_ops structure (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Use finer-grained timeouts for rcu_torture_writer() polling (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Decorate failing reader segments with CPU ID (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Make the TREE03 scenario do preemption (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add random real-time preemption (Čestmír Kalina) [RHEL-114406]
  - torture: Add dowarn argument to torture_sched_setaffinity() (Čestmír Kalina) [RHEL-114406]
  - MAINTAINERS: Update RCU git tree (Čestmír Kalina) [RHEL-114406]
  - rcu: Add lockdep_assert_irqs_disabled() to rcu_exp_need_qs() (Čestmír Kalina) [RHEL-114406]
  - rcu: Add KCSAN exclusive-writer assertions for rdp->cpu_no_qs.b.exp (Čestmír Kalina) [RHEL-114406]
  - rcu: Make preemptible rcu_exp_handler() check idempotency (Čestmír Kalina) [RHEL-114406]
  - rcu: Replace open-coded rcu_exp_need_qs() from rcu_exp_handler() with call (Čestmír Kalina) [RHEL-114406]
  - rcu: Move rcu_report_exp_rdp() setting of ->cpu_no_qs.b.exp under lock (Čestmír Kalina) [RHEL-114406]
  - rcu: Make rcu_report_exp_cpu_mult() caller acquire lock (Čestmír Kalina) [RHEL-114406]
  - rcu: Report callbacks enqueued on offline CPU blind spot (Čestmír Kalina) [RHEL-114406]
  - mm/slab: Move kvfree_rcu() into SLAB (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Adjust a shrinker name (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Adjust names passed into trace functions (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Move some functions under CONFIG_TINY_RCU (Čestmír Kalina) [RHEL-114406]
  - rcu/kvfree: Initialize kvfree_rcu() separately (Čestmír Kalina) [RHEL-114406]
  - rculist: add list_bidir_{del,prev}_rcu() (Čestmír Kalina) [RHEL-114406]
  - rcupdate_trace: Define rcu_tasks_trace lock guard (Čestmír Kalina) [RHEL-114406]
  - srcu: Unconditionally record srcu_read_lock_lite() in ->srcu_reader_flavor (Čestmír Kalina) [RHEL-114406]
  - srcu: Check for srcu_read_lock_lite() across all CPUs (Čestmír Kalina) [RHEL-114406]
  - srcu: Remove smp_mb() from srcu_read_unlock_lite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Improve srcu_read_lock_lite() kernel-doc comment (Čestmír Kalina) [RHEL-114406]
  - refscale: Add srcu_read_lock_lite() support using "srcu-lite" (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add light-weight SRCU scenario (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add srcu_read_lock_lite() support to rcutorture.reader_flavor (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Add reader_flavor parameter for SRCU readers (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Expand RCUTORTURE_RDR_MASK_[12] to eight bits (Čestmír Kalina) [RHEL-114406]
  - srcu: Allow inlining of __srcu_read_{,un}lock_lite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Add srcu_read_lock_lite() and srcu_read_unlock_lite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Create CPP macros for normal and NMI-safe SRCU readers (Čestmír Kalina) [RHEL-114406]
  - srcu: Improve srcu_read_lock{,_nmisafe}() comments (Čestmír Kalina) [RHEL-114406]
  - srcu: Standardize srcu_data pointers to "sdp" and similar (Čestmír Kalina) [RHEL-114406]
  - srcu: Bit manipulation changes for additional reader flavor (Čestmír Kalina) [RHEL-114406]
  - srcu: Renaming in preparation for additional reader flavor (Čestmír Kalina) [RHEL-114406]
  - srcu: Introduce srcu_gp_is_expedited() helper function (Čestmír Kalina) [RHEL-114406]
  - srcu: Rename srcu_might_be_idle() to srcu_should_expedite() (Čestmír Kalina) [RHEL-114406]
  - srcu: Replace WARN_ON_ONCE() with BUILD_BUG_ON() if possible (Čestmír Kalina) [RHEL-114406]
  - rcu: Finer-grained grace-period-end checks in rcu_dump_cpu_stacks() (Čestmír Kalina) [RHEL-114406]
  - rcu: Stop stall warning from dumping stacks if grace period ends (Čestmír Kalina) [RHEL-114406]
  - rcu: Delete unused rcu_gp_might_be_stalled() function (Čestmír Kalina) [RHEL-114406]
  - rcuscale: Remove redundant WARN_ON_ONCE() splat (Čestmír Kalina) [RHEL-114406]
  - rcuscale: Do a proper cleanup if kfree_scale_init() fails (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Avoid printing cpu=-1 for no-fault RCU boost failure (Čestmír Kalina) [RHEL-114406]
  - rcuscale: Add guest_os_delay module parameter (Čestmír Kalina) [RHEL-114406]
  - refscale: Correct affinity check (Čestmír Kalina) [RHEL-114406]
  - torture: Add --no-affinity parameter to kvm.sh (Čestmír Kalina) [RHEL-114406]
  - rcu/nocb: Fix missed RCU barrier on deoffloading (Čestmír Kalina) [RHEL-114406]
  - rcu: Remove unused declaration rcu_segcblist_offload() (Čestmír Kalina) [RHEL-114406]
  - rcu/srcutiny: don't return before reenabling preemption (Čestmír Kalina) [RHEL-114406]
  - rcu-tasks: Remove open-coded one-byte cmpxchg() emulation (Čestmír Kalina) [RHEL-114406]
  - doc: Remove kernel-parameters.txt entry for rcutorture.read_exit (Čestmír Kalina) [RHEL-114406]
  - rcutorture: Test start-poll primitives with interrupts disabled (Čestmír Kalina) [RHEL-114406]
  - rcu: Permit start_poll_synchronize_rcu*() with interrupts disabled (Čestmír Kalina) [RHEL-114406]
  - rcu: Allow short-circuiting of synchronize_rcu_tasks_rude() (Čestmír Kalina) [RHEL-114406]
  - doc: Add rcuog kthreads to kernel-per-CPU-kthreads.rst (Čestmír Kalina) [RHEL-114406]
  - rcu: Add rcuog kthreads to RCU_NOCB_CPU help text (Čestmír Kalina) [RHEL-114406]
  - rcu: Use the BITS_PER_LONG macro (Čestmír Kalina) [RHEL-114406]
  - rcu: Use bitwise instead of arithmetic operator for flags (Čestmír Kalina) [RHEL-114406]
  - doc: rcu: update printed dynticks counter bits (Čestmír Kalina) [RHEL-114406]
  - ext4: fix potential null deref in ext4_mb_init() (Brian Foster) [RHEL-121233]
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Brian Foster) [RHEL-121233]
  - ext4: fix incorrect function name in comment (Brian Foster) [RHEL-121233]
  - ext4: use kmalloc_array() for array space allocation (Brian Foster) [RHEL-121233]
  - ext4: fix hole length calculation overflow in non-extent inodes (Brian Foster) [RHEL-121233]
  - ext4: don't try to clear the orphan_present feature block device is r/o (Brian Foster) [RHEL-121233]
  - ext4: fix reserved gdt blocks handling in fsmap (Brian Foster) [RHEL-121233]
  - ext4: fix fsmap end of range reporting with bigalloc (Brian Foster) [RHEL-121233]
  - ext4: remove redundant __GFP_NOWARN (Brian Foster) [RHEL-121233]
  - ext4: fix unused variable warning in ext4_init_new_dir (Brian Foster) [RHEL-121233]
  - ext4: remove useless if check (Brian Foster) [RHEL-121233]
  - ext4: check fast symlink for ea_inode correctly (Brian Foster) [RHEL-121233]
  - ext4: preserve SB_I_VERSION on remount (Brian Foster) [RHEL-121233]
  - ext4: show the default enabled i_version option (Brian Foster) [RHEL-121233]
  - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (Brian Foster) [RHEL-121233]
  - ext4: implement linear-like traversal across order xarrays (Brian Foster) [RHEL-121233]
  - ext4: refactor choose group to scan group (Brian Foster) [RHEL-121233]
  - ext4: convert free groups order lists to xarrays (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_mb_scan_group() (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_mb_might_prefetch() (Brian Foster) [RHEL-121233]
  - ext4: factor out __ext4_mb_scan_group() (Brian Foster) [RHEL-121233]
  - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (Brian Foster) [RHEL-121233]
  - ext4: fix zombie groups in average fragment size lists (Brian Foster) [RHEL-121233]
  - ext4: merge freed extent with existing extents before insertion (Brian Foster) [RHEL-121233]
  - ext4: convert sbi->s_mb_free_pending to atomic_t (Brian Foster) [RHEL-121233]
  - ext4: fix typo in CR_GOAL_LEN_SLOW comment (Brian Foster) [RHEL-121233]
  - ext4: get rid of some obsolete EXT4_MB_HINT flags (Brian Foster) [RHEL-121233]
  - ext4: utilize multiple global goals to reduce contention (Brian Foster) [RHEL-121233]
  - ext4: remove unnecessary s_md_lock on update s_mb_last_group (Brian Foster) [RHEL-121233]
  - ext4: remove unnecessary s_mb_last_start (Brian Foster) [RHEL-121233]
  - ext4: separate stream goal hits from s_bal_goals for better tracking (Brian Foster) [RHEL-121233]
  - ext4: add ext4_try_lock_group() to skip busy groups (Brian Foster) [RHEL-121233]
  - ext4: initialize superblock fields in the kballoc-test.c kunit tests (Brian Foster) [RHEL-121233]
  - ext4: refactor the inline directory conversion and new directory codepaths (Brian Foster) [RHEL-121233]
  - ext4: use memcpy() instead of strcpy() (Brian Foster) [RHEL-121233]
  - ext4: replace strcmp with direct comparison for '.' and '..' (Brian Foster) [RHEL-121233]
  - ext4: Make sure BH_New bit is cleared in ->write_end handler (Brian Foster) [RHEL-121233]
  - ext4: fix inode use after free in ext4_end_io_rsv_work() (Brian Foster) [RHEL-121233]
  - ext4: Refactor breaking condition for xattr_find_entry() (Brian Foster) [RHEL-121233]
  - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks() (Brian Foster) [RHEL-121233]
  - ext4: replace ext4_writepage_trans_blocks() (Brian Foster) [RHEL-121233]
  - ext4: reserved credits for one extent during the folio writeback (Brian Foster) [RHEL-121233]
  - ext4: correct the reserved credits for extent conversion (Brian Foster) [RHEL-121233]
  - ext4: enhance tracepoints during the folios writeback (Brian Foster) [RHEL-121233]
  - ext4: restart handle if credits are insufficient during allocating blocks (Brian Foster) [RHEL-121233]
  - ext4: refactor the block allocation process of ext4_page_mkwrite() (Brian Foster) [RHEL-121233]
  - ext4: fix stale data if it bail out of the extents mapping loop (Brian Foster) [RHEL-121233]
  - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done() (Brian Foster) [RHEL-121233]
  - ext4: process folios writeback in bytes (Brian Foster) [RHEL-121233]
  - ext4: remove unused EXT_STATS macro from ext4_extents.h (Brian Foster) [RHEL-121233]
  - ext4: remove unnecessary duplicate check in ext4_map_blocks() (Brian Foster) [RHEL-121233]
  - ext4: remove duplicate check for EXT4_FC_REPLAY (Brian Foster) [RHEL-121233]
  - ext4: Add a WARN_ON_ONCE for querying LAST_IN_LEAF instead (Brian Foster) [RHEL-121233]
  - ext4: Simplify flags in ext4_map_query_blocks() (Brian Foster) [RHEL-121233]
  - ext4: Rename and document EXT4_EX_FILTER to EXT4_EX_QUERY_FILTER (Brian Foster) [RHEL-121233]
  - ext4: Simplify last in leaf check in ext4_map_query_blocks (Brian Foster) [RHEL-121233]
  - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE (Brian Foster) [RHEL-121233]
  - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc (Brian Foster) [RHEL-121233]
  - ext4: Add multi-fsblock atomic write support with bigalloc (Brian Foster) [RHEL-121233]
  - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS (Brian Foster) [RHEL-121233]
  - ext4: Make ext4_meta_trans_blocks() non-static for later use (Brian Foster) [RHEL-121233]
  - ext4: Check if inode uses extents in ext4_inode_can_atomic_write() (Brian Foster) [RHEL-121233]
  - ext4: Document an edge case for overwrites (Brian Foster) [RHEL-121233]
  - jbd2: remove journal_t argument from jbd2_superblock_csum() (Brian Foster) [RHEL-121233]
  - jbd2: remove journal_t argument from jbd2_chksum() (Brian Foster) [RHEL-121233]
  - ext4: remove sb argument from ext4_superblock_csum() (Brian Foster) [RHEL-121233]
  - ext4: remove sbi argument from ext4_chksum() (Brian Foster) [RHEL-121233]
  - ext4: make online defragmentation support large folios (Brian Foster) [RHEL-121233]
  - ext4: make the writeback path support large folios (Brian Foster) [RHEL-121233]
  - ext4: correct the journal credits calculations of allocating blocks (Brian Foster) [RHEL-121233]
  - ext4/jbd2: convert jbd2_journal_blocks_per_page() to support large folio (Brian Foster) [RHEL-121233]
  - ext4: make __ext4_block_zero_page_range() support large folio (Brian Foster) [RHEL-121233]
  - ext4: make regular file's buffered write path support large folios (Brian Foster) [RHEL-121233]
  - ext4: make ext4_mpage_readpages() support large folios (Brian Foster) [RHEL-121233]
  - ext4: ensure i_size is smaller than maxbytes (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_get_maxbytes() (Brian Foster) [RHEL-121233]
  - ext4: fix incorrect punch max_end (Brian Foster) [RHEL-121233]
  - ext4: fix out of bounds punch offset (Brian Foster) [RHEL-121233]
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Brian Foster) [RHEL-121233]
  - ext4: use writeback_iter in ext4_journalled_submit_inode_data_buffers (Brian Foster) [RHEL-121233]
  - ext4: fix calculation of credits for extent tree modification (Brian Foster) [RHEL-121233]
  - ext4: avoid -Wformat-security warning (Brian Foster) [RHEL-121233]
  - ext4: clairfy the rules for modifying extents (Brian Foster) [RHEL-121233]
  - ext4: check env when mapping and modifying extents (Brian Foster) [RHEL-121233]
  - ext4: introduce ext4_check_map_extents_env() debug helper (Brian Foster) [RHEL-121233]
  - ext4: factor out is_special_ino() (Brian Foster) [RHEL-121233]
  - ext4: prevent stale extent cache entries caused by concurrent get es_cache (Brian Foster) [RHEL-121233]
  - ext4: prevent stale extent cache entries caused by concurrent fiemap (Brian Foster) [RHEL-121233]
  - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-121233]
  - ext4: generalize EXT4_GET_BLOCKS_IO_SUBMIT flag usage (Brian Foster) [RHEL-121233]
  - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-121233]
  - ext4: inline: fix len overflow in ext4_prepare_inline_data (Brian Foster) [RHEL-121233]
  - ext4: hold s_fc_lock while during fast commit (Brian Foster) [RHEL-121233]
  - ext4: convert s_fc_lock to mutex type (Brian Foster) [RHEL-121233]
  - ext4: temporarily elevate commit thread priority (Brian Foster) [RHEL-121233]
  - ext4: update code documentation (Brian Foster) [RHEL-121233]
  - ext4: drop i_fc_updates from inode fc info (Brian Foster) [RHEL-121233]
  - ext4: rework fast commit commit path (Brian Foster) [RHEL-121233]
  - ext4: mark inode dirty before grabbing i_data_sem in ext4_setattr (Brian Foster) [RHEL-121233]
  - ext4: for committing inode, make ext4_fc_track_inode wait (Brian Foster) [RHEL-121233]
  - ext4: convert i_fc_lock to spinlock (Brian Foster) [RHEL-121233]
  - ext4: make block validity check resistent to sb bh corruption (Brian Foster) [RHEL-121233]
  - ext4: avoid -Wflex-array-member-not-at-end warning (Brian Foster) [RHEL-121233]
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption (Brian Foster) [RHEL-121233]
  - ext4: on a remount, only log the ro or r/w state when it has changed (Brian Foster) [RHEL-121233]
  - ext4: correct the error handle in ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: Make sb update interval tunable (Brian Foster) [RHEL-121233]
  - ext4: hash: simplify kzalloc(n * 1, ...) to kzalloc(n, ...) (Brian Foster) [RHEL-121233]
  - jbd2: add a missing data flush during file and fs synchronization (Brian Foster) [RHEL-121233]
  - ext4: clear DISCARD flag if device does not support discard (Brian Foster) [RHEL-121233]
  - jbd2: remove jbd2_journal_unfile_buffer() (Brian Foster) [RHEL-121233]
  - ext4: reorder capability check last (Brian Foster) [RHEL-121233]
  - ext4: update the comment about mb_optimize_scan (Brian Foster) [RHEL-121233]
  - jbd2: fix off-by-one while erasing journal (Brian Foster) [RHEL-121233]
  - ext4: remove references to bh->b_page (Brian Foster) [RHEL-121233]
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr() (Brian Foster) [RHEL-121233]
  - jbd2: remove redundant function jbd2_journal_has_csum_v2or3_feature (Brian Foster) [RHEL-121233]
  - ext4: remove redundant function ext4_has_metadata_csum (Brian Foster) [RHEL-121233]
  - jbd2: do not try to recover wiped journal (Brian Foster) [RHEL-121233]
  - jbd2: remove wrong sb->s_sequence check (Brian Foster) [RHEL-121233]
  - ext4: verify fast symlink length (Brian Foster) [RHEL-121233]
  - ext4: remove unused input "inode" in ext4_find_dest_de (Brian Foster) [RHEL-121233]
  - ext4: remove unneeded forward declaration in namei.c (Brian Foster) [RHEL-121233]
  - ext4: add missing brelse() for bh2 in ext4_dx_add_entry() (Brian Foster) [RHEL-121233]
  - jbd2: Correct stale comment of release_buffer_page (Brian Foster) [RHEL-121233]
  - jbd2: correct stale function name in comment (Brian Foster) [RHEL-121233]
  - jbd2: remove stale comment of update_t_max_wait (Brian Foster) [RHEL-121233]
  - jbd2: remove unused return value of do_readahead (Brian Foster) [RHEL-121233]
  - jbd2: remove unused return value of jbd2_journal_cancel_revoke (Brian Foster) [RHEL-121233]
  - ext4: show 'shutdown' hint when ext4 is forced to shutdown (Brian Foster) [RHEL-121233]
  - ext4: show 'emergency_ro' when EXT4_FLAGS_EMERGENCY_RO is set (Brian Foster) [RHEL-121233]
  - ext4: correct behavior under errors=remount-ro mode (Brian Foster) [RHEL-121233]
  - ext4: add more ext4_emergency_state() checks around sb_rdonly() (Brian Foster) [RHEL-121233]
  - ext4: add ext4_emergency_state() helper function (Brian Foster) [RHEL-121233]
  - ext4: add EXT4_FLAGS_EMERGENCY_RO bit (Brian Foster) [RHEL-121233]
  - ext4: convert EXT4_FLAGS_* defines to enum (Brian Foster) [RHEL-121233]
  - ext4: pack holes in ext4_inode_info (Brian Foster) [RHEL-121233]
  - ext4: remove unused member 'i_unwritten' from 'ext4_inode_info' (Brian Foster) [RHEL-121233]
  - jbd2: drop JBD2_ABORT_ON_SYNCDATA_ERR (Brian Foster) [RHEL-121233]
  - ext4: abort journal on data writeback failure if in data_err=abort mode (Brian Foster) [RHEL-121233]
  - ext4: extract ext4_has_journal_option() from __ext4_fill_super() (Brian Foster) [RHEL-121233]
  - ext4: reject the 'data_err=abort' option in nojournal mode (Brian Foster) [RHEL-121233]
  - ext4: do not convert the unwritten extents if data writeback fails (Brian Foster) [RHEL-121233]
  - ext4: replace opencoded ext4_end_io_end() in ext4_put_io_end() (Brian Foster) [RHEL-121233]
  - ext4: fix potential null dereference in ext4 kunit test (Brian Foster) [RHEL-121233]
  - ext4: Refactor out ext4_try_to_write_inline_data() (Brian Foster) [RHEL-121233]
  - ext4: Replace ext4_da_write_inline_data_begin() with ext4_generic_write_inline_data(). (Brian Foster) [RHEL-121233]
  - ext4: Introduce a new helper function ext4_generic_write_inline_data() (Brian Foster) [RHEL-121233]
  - ext4: Don't set EXT4_STATE_MAY_INLINE_DATA for ea inodes (Brian Foster) [RHEL-121233]
  - ext4: Remove a redundant return statement (Brian Foster) [RHEL-121233]
  - ext4: protect ext4_release_dquot against freezing (Brian Foster) [RHEL-121233]
  - ext4: introduce linear search for dentries (Brian Foster) [RHEL-121233]
  - jbd2: Avoid long replay times due to high number or revoke blocks (Brian Foster) [RHEL-121233]
  - ext4: move out common parts into ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: move out inode_lock into ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: factor out ext4_do_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_insert_range() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_collapse_range() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_zero_range() (Brian Foster) [RHEL-121233]
  - ext4: refactor ext4_punch_hole() (Brian Foster) [RHEL-121233]
  - ext4: don't write back data before punch hole in nojournal mode (Brian Foster) [RHEL-121233]
  - ext4: don't explicit update times in ext4_fallocate() (Brian Foster) [RHEL-121233]
  - ext4: remove writable userspace mappings before truncating page cache (Brian Foster) [RHEL-121233]
  - ext4: remove unneeded forward declaration (Brian Foster) [RHEL-121233]
  - jbd2: remove unused transaction->t_private_list (Brian Foster) [RHEL-121233]
  - ext4: remove unused ext4 journal callback (Brian Foster) [RHEL-121233]
  - ext4 fast_commit: make use of name_snapshot primitives (Brian Foster) [RHEL-121233]
  - ext4: use inode_set_cached_link() (Brian Foster) [RHEL-121233]
  - vfs: support caching symlink lengths in inodes (Brian Foster) [RHEL-121233]
  - jbd2: switch to using the crc32c library (Brian Foster) [RHEL-121233]
  - ext4: switch to using the crc32c library (Brian Foster) [RHEL-121233]
  - sched/fair: Have SD_SERIALIZE affect newidle balancing (Phil Auld) [RHEL-130534]
  - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (Phil Auld) [RHEL-130534]
  - Revert "Drivers: hv: Add CONFIG_HYPERV_VMBUS option" (Anusha Srivatsa) [RHEL-126642]
  - Revert "change the calling conventions for vfs_parse_fs_string()" (Anusha Srivatsa) [RHEL-126642]
  - redhat/configs: Add new configs from DRM 6.18 backport (Anusha Srivatsa) [RHEL-126642]
  - Merge DRM changes from upstream v6.17..v6.18 (Anusha Srivatsa) [RHEL-126642]
  - efi/x86: Memory protection on EfiGcdMemoryTypeMoreReliable (Lenny Szubowicz) [RHEL-124884]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-186.el10]
changelog:
  - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139492] {CVE-2025-68301}
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139467] {CVE-2025-68305}
  - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: use modern PM macros (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: add some simple inline functions for !CONFIG_PM (Jared Kangas) [RHEL-138679]
  - mmc: Remove redundant pm_runtime_mark_last_busy() calls (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Drop the use of sdhci_pltfm_free() (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: Use devm_mmc_alloc_host() helper (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: Return void from sdhci_runtime_suspend|resume_host() (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: optimize clock loopback selection with dummy pad support (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: refactor clock loopback selection logic (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: fix few build warnings (Jared Kangas) [RHEL-138679]
  - mmc: host: sdhci-esdhc-imx: refactor the system PM logic (Jared Kangas) [RHEL-138679]
  - mmc: sdhci: export APIs for sdhci irq wakeup (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: fix defined but not used warnings (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: switch standard tuning to manual tuning (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: verify tuning control status after configuration (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: widen auto-tuning window for manual tuning (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: widen auto-tuning window for standard tuning (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: reset async FIFO before sending manual tuning command (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: explicitly reset tuning circuit via RSTT bit (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: calculate data timeout value based on clock (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Save tuning value when card stays powered in suspend (Jared Kangas) [RHEL-138679]
  - mmc: Use of_property_present() for non-boolean properties (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: enable 'SDHCI_QUIRK_NO_LED' quirk for S32G (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Update esdhc sysctl dtocv bitmask (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: Implement emmc hardware reset (Jared Kangas) [RHEL-138679]
  - mmc: host: Fix typos in comments across various files (Jared Kangas) [RHEL-138679]
  - mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED (Jared Kangas) [RHEL-138679]
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136974] {CVE-2025-40294}
  - Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136953] {CVE-2025-40301}
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136839] {CVE-2025-38568}
  - smb: client: fix UBSAN array-index-out-of-bounds in smb2_copychunk_range (Paulo Alcantara) [RHEL-116054]
  - smb3 client: add missing tracepoint for unsupported ioctls (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix refcount leak in smb2_open() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix refcount leak in parse_durable_handle_context() (Paulo Alcantara) [RHEL-116054]
  - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix memory leak in get_file_all_info() (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix memory and information leak in smb3_reconfigure() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix minimum SMB2 PDU size (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix minimum SMB1 PDU size (Paulo Alcantara) [RHEL-116054]
  - ksmbd: rename smb2_get_msg to smb_get_msg (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix to handle removal of rfc1002 header from smb_hdr (Paulo Alcantara) [RHEL-116054]
  - cifs: update internal module version number (Paulo Alcantara) [RHEL-116054]
  - smb: move some SMB1 definitions into common/smb1pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: align durable reconnect v2 context to 8 byte boundary (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix buffer validation by including null terminator size in EA length (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix refcount leak when invalid session is found on session lookup (Paulo Alcantara) [RHEL-116054]
  - ksmbd: remove redundant DACL check in smb_check_perm_dacl (Paulo Alcantara) [RHEL-116054]
  - smb: server: defer the initial recv completion logic to smb_direct_negotiate_recv_work() (Paulo Alcantara) [RHEL-116054]
  - smb: server: initialize recv_io->cqe.done = recv_done just once (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.connect.{lock,work} (Paulo Alcantara) [RHEL-116054]
  - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Paulo Alcantara) [RHEL-116054]
  - redhat/configs: enable CONFIG_RXGK (Paulo Alcantara) [RHEL-116054]
  - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Paulo Alcantara) [RHEL-116054]
  - smb/client: remove DeviceType Flags and Device Characteristics definitions (Paulo Alcantara) [RHEL-116054]
  - smb: move File Attributes definitions into common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: update struct duplicate_extents_to_file_ex (Paulo Alcantara) [RHEL-116054]
  - smb: move file_notify_information to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move SMB2 Notify Action Flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move notify completion filter flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb/client: add parentheses to NT error code definitions containing bitwise OR operator (Paulo Alcantara) [RHEL-116054]
  - smb: add documentation references for smb2 change notify definitions (Paulo Alcantara) [RHEL-116054]
  - smb/client: add 4 NT error code definitions (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value (Paulo Alcantara) [RHEL-116054]
  - smb/server: add comment to FileSystemName of FileFsAttributeInformation (Paulo Alcantara) [RHEL-116054]
  - smb/server: remove unused nterr.h (Paulo Alcantara) [RHEL-116054]
  - smb/server: rename include guard in smb_common.h (Paulo Alcantara) [RHEL-116054]
  - smb/client: update some SMB2 status strings (Paulo Alcantara) [RHEL-116054]
  - cifs: Remove dead function prototypes (Paulo Alcantara) [RHEL-116054]
  - smb/client: add two elements to smb2_error_map_table array (Paulo Alcantara) [RHEL-116054]
  - smb: rename to STATUS_SMB_NO_PREAUTH_INTEGRITY_HASH_OVERLAP (Paulo Alcantara) [RHEL-116054]
  - smb/client: remove unused elements from smb2_error_map_table array (Paulo Alcantara) [RHEL-116054]
  - smb/client: reduce loop count in map_smb2_to_linux_error() by half (Paulo Alcantara) [RHEL-116054]
  - smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-116054]
  - smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2 (Paulo Alcantara) [RHEL-116054]
  - cifs: client: allow changing multichannel mount options on remount (Paulo Alcantara) [RHEL-116054]
  - cifs: Do some preparation prior to organising the function declarations (Paulo Alcantara) [RHEL-116054]
  - cifs: Add a tracepoint to log EIO errors (Paulo Alcantara) [RHEL-116054]
  - cifs: Don't need state locking in smb2_get_mid_entry() (Paulo Alcantara) [RHEL-116054]
  - cifs: Remove the server pointer from smb_message (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix specification of function pointers (Paulo Alcantara) [RHEL-116054]
  - cifs: Replace SendReceiveBlockingLock() with SendReceive() plus flags (Paulo Alcantara) [RHEL-116054]
  - cifs: Clean up some places where an extra kvec[] was required for rfc1002 (Paulo Alcantara) [RHEL-116054]
  - cifs: Make smb1's SendReceive() wrap cifs_send_recv() (Paulo Alcantara) [RHEL-116054]
  - cifs: Remove the RFC1002 header from smb_hdr (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1 (Paulo Alcantara) [RHEL-116054]
  - cifs: client: enforce consistent handling of multichannel and max_channels (Paulo Alcantara) [RHEL-116054]
  - cifs: Use netfs_alloc/free_folioq_buffer() (Paulo Alcantara) [RHEL-116054]
  - smb: client: show smb lease key in open_dirs output (Paulo Alcantara) [RHEL-116054]
  - smb: client: show smb lease key in open_files output (Paulo Alcantara) [RHEL-116054]
  - ksmbd: ipc: fix use-after-free in ipc_msg_send_request (Paulo Alcantara) [RHEL-116054]
  - smb: client: relax WARN_ON_ONCE(SMBDIRECT_SOCKET_*) checks in recv_done() and smbd_conn_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: server: relax WARN_ON_ONCE(SMBDIRECT_SOCKET_*) checks in recv_done() and smb_direct_cm_handler() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce SMBDIRECT_DEBUG_ERR_PTR() helper (Paulo Alcantara) [RHEL-116054]
  - ksmbd: vfs: fix race on m_flags in vfs_cache (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Replace strcpy + strcat to improve convert_to_nt_pathname (Paulo Alcantara) [RHEL-116054]
  - smb: move FILE_SYSTEM_ATTRIBUTE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - ksmbd: implement error handling for STATUS_INFO_LENGTH_MISMATCH in smb server (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency (Paulo Alcantara) [RHEL-116054]
  - ksmbd: server: avoid busy polling in accept loop (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_reconn to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: fix some warnings reported by scripts/checkpatch.pl (Paulo Alcantara) [RHEL-116054]
  - smb: do some cleanups (Paulo Alcantara) [RHEL-116054]
  - smb: move FILE_SYSTEM_SIZE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move some duplicate struct definitions to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move list of FileSystemAttributes to common/fscc.h (Paulo Alcantara) [RHEL-116054]
  - smb: move SMB_NEGOTIATE_REQ to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move some duplicate definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_rsp_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_handle_reconnect_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move create_durable_req_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move MAX_CIFS_SMALL_BUFFER_SIZE to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb/client: fix CAP_BULK_TRANSFER value (Paulo Alcantara) [RHEL-116054]
  - ksmbd: skip lock-range check on equal size to avoid size==0 underflow (Paulo Alcantara) [RHEL-116054]
  - smb: move resume_key_ioctl_rsp to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move copychunk definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move smb_sockaddr_in and smb_sockaddr_in6 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: move SMB1_PROTO_NUMBER to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: move get_rfc1002_len() to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: move smb_version_values to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: rename common/cifsglob.h to common/smbglob.h (Paulo Alcantara) [RHEL-116054]
  - smb/server: update some misguided comment of smb2_0_server_cmds proc (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_oplock_break() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_ioctl() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_query_dir() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_notify() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix return value of smb2_read() (Paulo Alcantara) [RHEL-116054]
  - afs: Fix uninit var in afs_alloc_anon_key() (Paulo Alcantara) [RHEL-116054]
  - afs: Fix delayed allocation of a cell's anonymous key (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix memory leak in cifs_construct_tcon() (Paulo Alcantara) [RHEL-116054]
  - cifs: Add the smb3_read_* tracepoints to SMB1 (Paulo Alcantara) [RHEL-116054]
  - cifs: fix memory leak in smb3_fs_context_parse_param error path (Paulo Alcantara) [RHEL-116054]
  - smb: client: introduce close_cached_dir_locked() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_disconnect_rdma_connection() turn CREATED into DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - smb: fix invalid username check in smb3_fs_context_parse_param() (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_disconnect_rdma_connection() turn CREATED into DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - ksmbd: close accepted socket when per-IP limit rejects connection (Paulo Alcantara) [RHEL-116054]
  - smb: server: rdma: avoid unmapping posted recv on accept failure (Paulo Alcantara) [RHEL-116054]
  - cifs: client: fix memory leak in smb3_fs_context_parse_param (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix cifs_pick_channel when channel needs reconnect (Paulo Alcantara) [RHEL-116054]
  - smb: client: validate change notify buffer before copy (Paulo Alcantara) [RHEL-116054]
  - ksmbd: detect RDMA capable netdevs include IPoIB (Paulo Alcantara) [RHEL-116054]
  - ksmbd: detect RDMA capable lower devices when bridge and vlan netdev is used (Paulo Alcantara) [RHEL-116054]
  - smb: client: call smbd_destroy() in the same splace as kernel_sock_shutdown()/sock_release() (Paulo Alcantara) [RHEL-116054]
  - afs: Fix dynamic lookup to fail on cell lookup failure (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_cm_handler() call ib_drain_qp() after smb_direct_disconnect_rdma_work() (Paulo Alcantara) [RHEL-116054]
  - smb: server: call smb_direct_post_recv_credits() when the negotiation is done (Paulo Alcantara) [RHEL-116054]
  - ksmbd: transport_ipc: validate payload size before reading handle (Paulo Alcantara) [RHEL-116054]
  - cifs: fix typo in enable_gcm_256 module parameter (Paulo Alcantara) [RHEL-116054]
  - smb: server: let free_transport() wait for SMBDIRECT_SOCKET_DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-116054]
  - cifs: Call the calc_signature functions directly (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix TCP_Server_Info::credits to be signed (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: simplify sibling_list handling in smb_direct_flush_send_list/send_done (Paulo Alcantara) [RHEL-116054]
  - smb: server: smb_direct_disconnect_rdma_connection() already wakes all waiters on error (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: allocate enough space for RW WRs and ib_drain_qp() (Paulo Alcantara) [RHEL-116054]
  - cifs: Add a couple of missing smb3_rw_credits tracepoints (Paulo Alcantara) [RHEL-116054]
  - smb: client: allocate enough space for MR WRs and ib_drain_qp() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_destroy() wait for SMBDIRECT_SOCKET_DISCONNECTED (Paulo Alcantara) [RHEL-116054]
  - smb: move some duplicate definitions to common/cifsglob.h (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() keep smbdirect_mr_io memory if registered (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix recursive locking in RPC handle list access (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix possible refcount leak in smb2_sess_setup() (Paulo Alcantara) [RHEL-116054]
  - smb/server: fix possible memory leak in smb2_read() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() call ib_dereg_mr() before ib_dma_unmap_sg() (Paulo Alcantara) [RHEL-116054]
  - smb: client: call ib_dma_unmap_sg if mr->sgt.nents is not 0 (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logic in smbd_deregister_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logic in smbd_register_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logic in allocate_mr_list() (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() remove locked from the list (Paulo Alcantara) [RHEL-116054]
  - smb: client: let destroy_mr_list() call list_del(&mr->list) (Paulo Alcantara) [RHEL-116054]
  - smb: client: change smbd_deregister_mr() to return void (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_mr_io.{kref,mutex} and SMBDIRECT_MR_DISABLED (Paulo Alcantara) [RHEL-116054]
  - smb: client: Omit one redundant variable assignment in cifs_xattr_set() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-116054]
  - smb: server: Use common error handling code in smb_direct_rdma_xmit() (Paulo Alcantara) [RHEL-116054]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-116054]
  - cifs: Add comments for DeletePending assignments in open functions (Paulo Alcantara) [RHEL-116054]
  - cifs: Add fallback code path for cifs_mkdir_setinfo() (Paulo Alcantara) [RHEL-116054]
  - cifs: Allow fallback code in smb_set_file_info() also for directories (Paulo Alcantara) [RHEL-116054]
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove redudant assignment in cifs_strict_fsync() (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix race with fallocate(2) and AIO+DIO (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix missing timestamp updates after ftruncate(2) (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix missing timestamp updates with O_TRUNC (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix copy_to_iter return value check (Paulo Alcantara) [RHEL-116054]
  - smb: client: batch SRV_COPYCHUNK entries to cut round trips (Paulo Alcantara) [RHEL-116054]
  - smb: client: Omit an if branch in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Return directly after a failed genlmsg_new() in cifs_swn_send_register_message() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Use common code in cifs_do_create() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Return a status code only as a constant in cifs_spnego_key_instantiate() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Use common code in cifs_lookup() (Paulo Alcantara) [RHEL-116054]
  - smb: client: Reduce the scopes for a few variables in two functions (Paulo Alcantara) [RHEL-116054]
  - cifs: client: force multichannel=off when max_channels=1 (Paulo Alcantara) [RHEL-116054]
  - smb: client: transport: minor indentation style fix (Paulo Alcantara) [RHEL-116054]
  - smb: client: transport: avoid reconnects triggered by pending task work (Paulo Alcantara) [RHEL-116054]
  - ksmbd: increase session and share hash table bits (Paulo Alcantara) [RHEL-116054]
  - ksmbd: replace connection list with hash table (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add an error print when maximum IP connections limit is reached (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add max ip connections parameter (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix error code overwriting in smb2_get_info_filesystem() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: copy overlapped range within the same file (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use sock_create_kern interface to create kernel socket (Paulo Alcantara) [RHEL-116054]
  - ksmbd: make ksmbd thread names distinct by client IP (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix race condition in RPC handle list access (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix crypto buffers in non-linear memory (Paulo Alcantara) [RHEL-116054]
  - smb: client: add tcon information to smb2_reconnect() debug messages (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_flush_send_list() invalidate a remote key first (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of ib_alloc_cq_any() instead of ib_alloc_cq() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make consitent use of spin_lock_irq{save,restore}() in transport_rdma.c (Paulo Alcantara) [RHEL-116054]
  - smb: server: let {free_transport,smb_direct_disconnect_rdma_{work,connection}}() wake up all wait queues (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_disconnect_rdma_connection() disable all work but disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: server: fill in smbdirect_socket.first_error on error (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_disconnect_rdma_connection() set SMBDIRECT_SOCKET_ERROR... (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_send_negotiate_response() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to {enqueue,get_first}_reassembly() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_post_send_data() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to post_sendmsg() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_create_header() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to manage_keep_alive_before_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to manage_credits_prior_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to calc_rw_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to wait_for_rw_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to wait_for_send_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to wait_for_credits() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_post_send() (Paulo Alcantara) [RHEL-116054]
  - smb: server: remove unused struct struct smb_direct_transport argument from smb_direct_send_ctx_init() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_{alloc,free}_sendmsg() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_connect() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_prepare_negotiation() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_accept_client() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_post_recv() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_create_qpair() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_qpair_handler() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_cm_handler() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_init_params() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_get_max_fr_pages() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to smb_direct_{create,destroy}_pools() (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass struct smbdirect_socket to {get_free,put}_recvmsg() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116054]
  - smb: server: implement correct keepalive and timeout handling for smbdirect (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.idle.immediate_work (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket_parameters.negotiate_timeout_msec and change to 5s (Paulo Alcantara) [RHEL-116054]
  - smb: server: fill smbdirect_socket_parameters at the beginning and use the values from there (Paulo Alcantara) [RHEL-116054]
  - smb: server: pass ksmbd_transport to get_smbd_max_read_write_size() (Paulo Alcantara) [RHEL-116054]
  - smb: server: remove useless casts from KSMBD_TRANS/SMBD_TRANS (Paulo Alcantara) [RHEL-116054]
  - smb: server: replace smb_trans_direct_transfort() with SMBD_TRANS() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116054]
  - smb: server: manage recv credits by counting posted recv_io and granted credits (Paulo Alcantara) [RHEL-116054]
  - smb: server: take the recv_credit_target from the negotiate req and always limit the range (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_rw_io (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use smbdirect_socket.rw_io.credits (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_send_batch (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.send_io.pending.{count,zero_wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket_init() (Paulo Alcantara) [RHEL-116054]
  - smb: server: don't wait for info->send_pending == 0 on error (Paulo Alcantara) [RHEL-116054]
  - smb: server: move smb_direct_disconnect_rdma_work() into free_transport() (Paulo Alcantara) [RHEL-116054]
  - smb: server: only turn into SMBDIRECT_SOCKET_CONNECTED when negotiation is done (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116054]
  - smb: server: queue post_recv_credits_work in put_recvmsg() and avoid count_avail_recvmsg (Paulo Alcantara) [RHEL-116054]
  - smb: server: add a pr_info() when the server starts running (Paulo Alcantara) [RHEL-116054]
  - smb: server: make only use of wake_up[_all]() in transport_rdma.c (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_send_io (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of smbdirect_socket->recv_io.expected (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect.h (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-116054]
  - smb: server: fix IRD/ORD negotiation with the client (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_post_send_iter() call ib_dma_map_single() for the header first (Paulo Alcantara) [RHEL-116054]
  - smb: client: defer calling ib_alloc_pd() after we are connected (Paulo Alcantara) [RHEL-116054]
  - smb: client: allocate smbdirect workqueue at the beginning of _smbd_get_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make consitent use of spin_lock_irq{save,restore}() in smbdirect.c (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_{destroy,disconnect_rdma_{work,connection}}() wake up all wait queues (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_disconnect_rdma_connection() disable all work but disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: fill in smbdirect_socket.first_error on error (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_disconnect_rdma_connection() set SMBDIRECT_SOCKET_ERROR... (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused struct smbdirect_socket argument of smbd_iter_to_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to get_mr() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_negotiate() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_negotiate_req() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_ia_open() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_create_id() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_qp_async_error_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_conn_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_full_iter() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_empty() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_iter() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to manage_keep_alive_before_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_send() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to manage_credits_prior_sending() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_post_recv() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_mr_list() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {enqueue,_get_first}_reassembly() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_caches_and_workqueue() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_receive_buffers() (Paulo Alcantara) [RHEL-116054]
  - smb: client: pass struct smbdirect_socket to {get,put}_receive_buffer() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.mr_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: add and use smbd_get_parameters() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116054]
  - smb: client: move rdma_readwrite_threshold from smbd_connection to TCP_Server_Info (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused smbd_connection.count_reassembly_queue (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused smbd_connection->protocol (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix smbdirect keep alive handling to match the documentation (Paulo Alcantara) [RHEL-116054]
  - smb: client: send empty packets via send_immediate_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116054]
  - smb: client: fill smbdirect_socket_parameters at the beginning and use the values from there (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove useless smbd_connection.send_immediate (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116054]
  - smb: client: count the number of posted recv_io messages in order to calculated credits (Paulo Alcantara) [RHEL-116054]
  - smb: client: limit the range of info->receive_credit_target (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove info->wait_receive_queues handling in smbd_destroy() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of ib_wc_status_msg() and skip IB_WC_WR_FLUSH_ERR logging (Paulo Alcantara) [RHEL-116054]
  - smb: client: queue post_recv_credits_work also if the peer raises the credit target (Paulo Alcantara) [RHEL-116054]
  - smb: client: make sure smbd_disconnect_rdma_work() doesn't run after smbd_destroy() took over (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket_init() (Paulo Alcantara) [RHEL-116054]
  - smb: client: make only use of wake_up[_all]() in smbdirect.c (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116054]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_RESOLVE_{ADDR,ROUTE}_RUNNING for completion (Paulo Alcantara) [RHEL-116054]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_NEGOTIATE_RUNNING for completion (Paulo Alcantara) [RHEL-116054]
  - smb: client: adjust smbdirect related output of cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.first_error (Paulo Alcantara) [RHEL-116054]
  - smb: client/smbdirect: introduce SMBDIRECT_SOCKET_ERROR (Paulo Alcantara) [RHEL-116054]
  - smb: client/smbdirect: replace SMBDIRECT_SOCKET_CONNECTING with more detailed states (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix sending the iwrap custom IRD/ORD negotiation messages (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: let smbdirect_socket_init() initialize all [delayed_]work_structs as disabled (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.mr_io.* (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_rw_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.rw_io.credits (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_send_batch (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_init() (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket_status_string() (Paulo Alcantara) [RHEL-116054]
  - include/linux/fs.h: add inode_lock_killable() (Paulo Alcantara) [RHEL-116054]
  - netfs: fix reference leak (Paulo Alcantara) [RHEL-116054]
  - afs: Fix potential null pointer dereference in afs_put_server (Paulo Alcantara) [RHEL-116054]
  - smb: server: use disable_work_sync in transport_rdma.c (Paulo Alcantara) [RHEL-116054]
  - smb: server: don't use delayed_work for post_recv_credits_work (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Paulo Alcantara) [RHEL-116054]
  - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) (Paulo Alcantara) [RHEL-116054]
  - smb: client: use disable[_delayed]_work_sync in smbdirect.c (Paulo Alcantara) [RHEL-116054]
  - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-116054]
  - netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-116054]
  - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size (Paulo Alcantara) [RHEL-116054]
  - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer (Paulo Alcantara) [RHEL-116054]
  - smb: server: let smb_direct_writev() respect SMB_DIRECT_MAX_SEND_SGES (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix untrusted unsigned subtract (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix unhandled errors in rxgk_verify_packet_integrity() (Paulo Alcantara) [RHEL-116054]
  - cifs: prevent NULL pointer dereference in UTF16 conversion (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix spellings in comments (Paulo Alcantara) [RHEL-116054]
  - ksmbd: allow a filename to contain colons on SMB3.1.1 posix extensions (Paulo Alcantara) [RHEL-116054]
  - smb3 client: fix return code mapping of remap_file_range (Paulo Alcantara) [RHEL-116054]
  - iov_iter: iterate_folioq: fix handling of offset >= folio size (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix refcount leak causing resource not released (Paulo Alcantara) [RHEL-116054]
  - ksmbd: extend the connection limiting mechanism to support IPv6 (Paulo Alcantara) [RHEL-116054]
  - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-116054]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-116054]
  - smb: client: don't wait for info->send_pending == 0 on error (Paulo Alcantara) [RHEL-116054]
  - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-116054]
  - smb3: fix for slab out of bounds on mount to ksmbd (Paulo Alcantara) [RHEL-116054]
  - cifs: avoid extra calls to strlen() in cifs_get_spnego_key() (Paulo Alcantara) [RHEL-116054]
  - cifs: Fix collect_sample() to handle any iterator type (Paulo Alcantara) [RHEL-116054]
  - smb: server: Fix extension string in ksmbd_extract_shortname() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: limit repeated connections from clients with the same IP (Paulo Alcantara) [RHEL-116054]
  - smb: client: only use a single wait_queue to monitor smbdirect connection status (Paulo Alcantara) [RHEL-116054]
  - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (Paulo Alcantara) [RHEL-116054]
  - smb: client: improve logging in smbd_conn_upcall() (Paulo Alcantara) [RHEL-116054]
  - smb: client: return an error if rdma_connect does not return within 5 seconds (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: add smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of struct smbdirect_send_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_send_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: add SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused enum smbd_connection_status (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smb: smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116054]
  - smb: client: make use of smbdirect_socket->recv_io.expected (Paulo Alcantara) [RHEL-116054]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.expected (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove unused smbd_connection->fragment_reassembly_remaining (Paulo Alcantara) [RHEL-116054]
  - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (Paulo Alcantara) [RHEL-116054]
  - smb: client: let recv_done() cleanup before notifying the callers. (Paulo Alcantara) [RHEL-116054]
  - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Paulo Alcantara) [RHEL-116054]
  - smb: client: remove separate empty_packet_queue (Paulo Alcantara) [RHEL-116054]
  - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116054]
  - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (Paulo Alcantara) [RHEL-116054]
  - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (Paulo Alcantara) [RHEL-116054]
  - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Paulo Alcantara) [RHEL-116054]
  - smb: server: remove separate empty_recvmsg_queue (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix corrupted mtime and ctime in smb2_open (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix Preauh_HashValue race condition (Paulo Alcantara) [RHEL-116054]
  - ksmbd: check return value of xa_store() in krb5_authenticate (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix null pointer dereference error in generate_encryptionkey (Paulo Alcantara) [RHEL-116054]
  - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix to use conn aborts for conn-wide failures (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix transmission of an abort in response to an abort (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix notification vs call-release vs recvmsg (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix recv-recv race of completed call (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix irq-disabled in local_bh_enable() (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix oops due to non-existence of prealloc backlog struct (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix bug due to prealloc collision (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix over large frame size warning (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix potential use-after-free in oplock/lease break ack (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked() (Paulo Alcantara) [RHEL-116054]
  - smb: server: make use of rdma_destroy_qp() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: handle set/get info file for streamed file (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix null pointer dereference in destroy_previous_session (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add free_transport ops in ksmbd connection (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Fix return from none_validate_challenge() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension (Paulo Alcantara) [RHEL-116054]
  - ksmbd: provide zero as a unique ID to the Mac client (Paulo Alcantara) [RHEL-116054]
  - ksmbd: remove unnecessary softdep on crc32 (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use SHA-256 library API instead of crypto_shash API (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Fix change to use SG miter to use offset (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Fix some reference count leaks (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Remove deadcode (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Set error code in rxgk_yfs_decode_ticket() (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxperf: Add test RxGK server keys (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Add more CHALLENGE/RESPONSE packet tracing (Paulo Alcantara) [RHEL-116054]
  - afs: Use rxgk RESPONSE to pass token for callback channel (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Display security params in the afs_cb_call tracepoint (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Allow the app to store private data on peer structs (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Implement connection rekeying (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Implement the yfs-rxgk security class (GSSAPI) (Paulo Alcantara) [RHEL-116054]
  - rxrpc: rxgk: Provide infrastructure and key derivation (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Add YFS RxGK (GSSAPI) security class (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Add the security index for yfs-rxgk (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Allow CHALLENGEs to the passed to the app for a RESPONSE (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Remove some socket lock acquire/release annotations (Paulo Alcantara) [RHEL-116054]
  - rxrpc: Pull out certain app callback funcs into an ops table (Paulo Alcantara) [RHEL-116054]
  - rxrpc: kdoc: Update function descriptions and add link from rxrpc.rst (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use list_first_entry_or_null for opinfo_get_list() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix rename failure (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix stream write failure (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix UAF in __close_file_table_ids (Paulo Alcantara) [RHEL-116054]
  - ksmbd: prevent out-of-bounds stream writes by validating *pos (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix memory leak in parse_lease_state() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: prevent rename with empty string (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in session logoff (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in kerberos authentication (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open (Paulo Alcantara) [RHEL-116054]
  - smb: server: smb2pdu: check return value of xa_store() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Prevent integer overflow in calculation of deadtime (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix the warning from __kernel_write_iter (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in __smb2_lease_break_noti() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Fix dangling pointer in krb_authenticate (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix null pointer dereference in alloc_preauth_hash() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: validate zero num_subauth before sub_auth is accessed (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix overflow in dacloffset bounds check (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix session use-after-free in multichannel connection (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix r_count dec/increment mismatch (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix multichannel connection failure (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use ib_device_get_netdev() instead of calling ops.get_netdev (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use aead_request_free to match aead_request_alloc (Paulo Alcantara) [RHEL-116054]
  - Revert "ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev()" (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add bounds check for create lease context (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add bounds check for durable handle context (Paulo Alcantara) [RHEL-116054]
  - ksmbd: make SMB_SERVER_KERBEROS5 enable by default (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Use str_read_write() and str_true_false() helpers (Paulo Alcantara) [RHEL-116054]
  - crypto: krb5 - Use SG miter instead of doing it by hand (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement crypto self-testing (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the AES enctypes from rfc8009 (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the AES enctypes from rfc3962 (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Provide RFC3961 setkey packaging functions (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Provide infrastructure and key derivation (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add an API to perform requests (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add an API to alloc and prepare a crypto object (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add an API to query the layout of the crypto section (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Implement Kerberos crypto core (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Add some constants out of sunrpc headers (Paulo Alcantara) [RHEL-116054]
  - crypto/krb5: Test manager data (Paulo Alcantara) [RHEL-116054]
  - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Paulo Alcantara) [RHEL-116054]
  - ksmbd: prevent connection release during oplock break notification (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in ksmbd_free_work_struct (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix bug on trap in smb2_lock (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in smb2_lock (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix type confusion via race condition when using ipc_msg_send_request (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix out-of-bounds in parse_sec_desc() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix integer overflows on 32 bit systems (Paulo Alcantara) [RHEL-116054]
  - ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Remove unused functions (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked (Paulo Alcantara) [RHEL-116054]
  - ksmbd: Remove unneeded if check in ksmbd_rdma_capable_netdev() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix a missing return value check bug (Paulo Alcantara) [RHEL-116054]
  - ksmbd: conn lock to serialize smb2 negotiate (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix broken transfers when exceeding max simultaneous operations (Paulo Alcantara) [RHEL-116054]
  - ksmbd: count all requests in req_running counter (Paulo Alcantara) [RHEL-116054]
  - ksmbd: set ATTR_CTIME flags when setting mtime (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix racy issue from session lookup and expire (Paulo Alcantara) [RHEL-116054]
  - ksmbd: retry iterate_dir in smb2_query_dir (Paulo Alcantara) [RHEL-116054]
  - ksmbd: align aux_payload_buf to avoid OOB reads in cryptographic operations (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Paulo Alcantara) [RHEL-116054]
  - smb: server: Fix building with GCC 15 (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix use-after-free in SMB request handling (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add debug print for pending request during server shutdown (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add netdev-up/down event debug print (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add debug prints to know what smb2 requests were received (Paulo Alcantara) [RHEL-116054]
  - ksmbd: add debug print for rdma capable (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use msleep instaed of schedule_timeout_interruptible() (Paulo Alcantara) [RHEL-116054]
  - ksmbd: use __GFP_RETRY_MAYFAIL (Paulo Alcantara) [RHEL-116054]
  - ksmbd: fix malformed unsupported smb1 negotiate response (Paulo Alcantara) [RHEL-116054]
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136261] {CVE-2025-40318}
  - platform/x86: intel-uncore-freq: Add additional client processors (Steve Best) [RHEL-129946]
  - genirq/manage: Reduce priority of forced secondary interrupt handler (Crystal Wood) [RHEL-102562]
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (Steve Best) [RHEL-129704]
  - selftests: net-drv: stats: sanity check FEC histogram (Mohammad Heib) [RHEL-123858]
  - ethtool: add FEC bins histogram report (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove duplicated mm.o from Makefile (Mohammad Heib) [RHEL-123858]
  - net: ethtool: tsconfig: set command must provide a reply (Mohammad Heib) [RHEL-123858]
  - net: virtio_net: add get_rxrings ethtool callback for RX ring queries (Mohammad Heib) [RHEL-123858]
  - net: ethtool: use the new helper in rss_set_prep_indir() (Mohammad Heib) [RHEL-123858]
  - net: ethtool: update set_rxfh_indir to use ethtool_get_rx_ring_count helper (Mohammad Heib) [RHEL-123858]
  - net: ethtool: update set_rxfh to use ethtool_get_rx_ring_count helper (Mohammad Heib) [RHEL-123858]
  - net: ethtool: add get_rx_ring_count callback to optimize RX ring queries (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove the duplicated handling from ethtool_get_rxrings (Mohammad Heib) [RHEL-123858]
  - net: ethtool: add support for ETHTOOL_GRXRINGS ioctl (Mohammad Heib) [RHEL-123858]
  - net: ethtool: pass the num of RX rings directly to ethtool_copy_validate_indir (Mohammad Heib) [RHEL-123858]
  - net: ethtool: handle EOPNOTSUPP from ethtool get_ts_info() method (Mohammad Heib) [RHEL-123858]
  - net: ethtool: fix wrong type used in struct kernel_ethtool_ts_info (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: add test for RSS on flow label (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: add rss_api to the Makefile (Mohammad Heib) [RHEL-123858]
  - net: ethtool: support including Flow Label in the flow hash for RSS (Mohammad Heib) [RHEL-123858]
  - netlink: specs: ethtool: fix module EEPROM input/output arguments (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: context create and delete tests (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support removing contexts via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support creating contexts via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: move ethtool_rxfh_ctx_alloc() to common code (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: factor out populating response from context (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: factor out allocating memory for response (Mohammad Heib) [RHEL-123858]
  - ethtool: rejig the RSS notification machinery for more types (Mohammad Heib) [RHEL-123858]
  - ethtool: assert that drivers with sym hash are consistent for RSS contexts (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: test input-xfrm and hash fields (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting flow hashing fields (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting input-xfrm via Netlink (Mohammad Heib) [RHEL-123858]
  - netlink: specs: define input-xfrm enum in the spec (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: test setting hashing key via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting hkey via Netlink (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: support setting hfunc via Netlink (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: test setting indirection table via Netlink (Mohammad Heib) [RHEL-123858]
  - tools: ynl: support packing binary arrays of scalars (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: rss_api: factor out checking min queue count (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: initial RSS_SET (indirection table handling) (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: test RSS header field configuration (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: report which fields are configured for hashing (Mohammad Heib) [RHEL-123858]
  - ethtool: mark ETHER_FLOW as usable for Rx hash (Mohammad Heib) [RHEL-123858]
  - tools: ynl: decode enums in auto-ints (Mohammad Heib) [RHEL-123858]
  - ethtool: rss: make sure dump takes the rss lock (Mohammad Heib) [RHEL-123858]
  - net: ethtool: reduce indent for _rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove the compat code for _rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - eth: mlx5: migrate to the *_rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - eth: ice: drop the dead code related to rss_contexts (Mohammad Heib) [RHEL-123858]
  - eth: otx2: migrate to the *_rxfh_context ops (Mohammad Heib) [RHEL-123858]
  - net: ethtool: fix leaking netdev ref if ethnl_default_parse() failed (Mohammad Heib) [RHEL-123858]
  - net: ethtool: move get_rxfh callback under the rss_lock (Mohammad Heib) [RHEL-123858]
  - net: ethtool: move rxfh_fields callbacks under the rss_lock (Mohammad Heib) [RHEL-123858]
  - net: ethtool: take rss_lock for all rxfh changes (Mohammad Heib) [RHEL-123858]
  - net: ethtool: avoid OOB accesses in PAUSE_SET (Mohammad Heib) [RHEL-123858]
  - netlink: specs: ethtool: replace underscores with dashes in names (Mohammad Heib) [RHEL-123858]
  - selftests: drv-net: test RSS Netlink notifications (Mohammad Heib) [RHEL-123858]
  - doc: ethtool: mark ETHTOOL_GRXFHINDIR as reimplemented (Mohammad Heib) [RHEL-123858]
  - net: ethtool: rss: add notifications (Mohammad Heib) [RHEL-123858]
  - net: ethtool: copy req_info from SET to NTF (Mohammad Heib) [RHEL-123858]
  - net: ethtool: remove the data argument from ethtool_notify() (Mohammad Heib) [RHEL-123858]
  - net: ethtool: call .parse_request for SET handlers (Mohammad Heib) [RHEL-123858]
  - net: ethtool: dynamically allocate full req size req (Mohammad Heib) [RHEL-123858]
  - netlink: specs: add the multicast group name to spec (Mohammad Heib) [RHEL-123858]
  - eth: Update rmon hist range (Mohammad Heib) [RHEL-123858]
  - net: Add support for providing the PTP hardware source in tsinfo (Mohammad Heib) [RHEL-123858]
  - net: ethtool: netlink: Use netdev_hold for dumpit() operations (Mohammad Heib) [RHEL-123858]
  - net: ethtool: phy: Convert the PHY_GET command to generic phy dump (Mohammad Heib) [RHEL-123858]
  - net: ethtool: Introduce per-PHY DUMP operations (Mohammad Heib) [RHEL-123858]
  - net: ethtool: Adjust exactly ETH_GSTRING_LEN-long stats to use memcpy (Mohammad Heib) [RHEL-123858]
  - net: freescale: use ethtool string helpers (Mohammad Heib) [RHEL-123858]
  - compiler_types: Introduce __nonstring_array (Mohammad Heib) [RHEL-123858]
  - net: ethtool: fix get_ts_stats() documentation (Mohammad Heib) [RHEL-123858]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-187.el10]
changelog:
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout (Michal Rábek) [RHEL-140732]
  - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-111046]
  - thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95660]
  - ipv4: start using dst_dev_rcu() (Hangbin Liu) [RHEL-128993]
  - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (Hangbin Liu) [RHEL-128993]
  - tcp_metrics: use dst_dev_net_rcu() (Hangbin Liu) [RHEL-128993]
  - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129089] {CVE-2025-40170}
  - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128993] {CVE-2025-40158}
  - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129028] {CVE-2025-40135}
  - ipv6: start using dst_dev_rcu() (Hangbin Liu) [RHEL-128993]
  - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128993]
  - ipv6: mcast: Add ip6_mc_find_idev() helper (Hangbin Liu) [RHEL-128993]
  - net: ipv4: guard ip_mr_output() with rcu (Hangbin Liu) [RHEL-128993]
  - net: ipv4: Add ip_mr_output() (Hangbin Liu) [RHEL-128993]
  - net: ipv4: ipmr: Split ipmr_queue_xmit() in two (Hangbin Liu) [RHEL-128993]
  - net: ipv4: ipmr: ipmr_queue_xmit(): Drop local variable `dev' (Hangbin Liu) [RHEL-128993]
  - RDMA/irdma: avoid invalid read in irdma_net_event (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix irdma_alloc_ucontext_resp padding (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix SRQ shadow area address initialization (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove doorbell elision logic (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Do not set IBK_LOCAL_DMA_LKEY for GEN3+ (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add missing mutex destroy (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix SIGBUS in AEQ destroy (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add a missing kfree of struct irdma_pci_f for GEN2 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix data race in irdma_free_pble (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix data race in irdma_sc_ccq_arm (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove redundant NULL check of udata in irdma_create_user_ah() (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove unused CQ registry (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Take a lock before moving SRQ tail in poll_cq (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: CQ size and shadow update changes for GEN3 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Silently consume unsignaled completions (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Initialize cqp_cmds_info to prevent resource leaks (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Enforce local fence for LOCAL_INV WRs (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix vf_id size to u16 to avoid overflow (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Set irdma_cq cq_num field during CQ create (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix SD index calculation (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Remove unused struct irdma_cq fields (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Fix positive vs negative error codes in irdma_post_send() (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Update Kconfig (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Extend CQE Error and Flush Handling for GEN3 Devices (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add Atomic Operations support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Restrict Memory Window and CQE Timestamping to GEN3 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add SRQ support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Support 64-byte CQEs and GEN3 CQE opcode decoding (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add support for V2 HMC resource management scheme (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Extend QP context programming for GEN3 (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 virtual QP1 support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Introduce GEN3 vPort driver support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 HW statistics support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 support for AEQ and CEQ (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 CQP support with deferred completions (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Discover and set up GEN3 hardware register layout (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Add GEN3 core driver support (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Refactor GEN2 auxiliary driver (Kamal Heib) [RHEL-99206]
  - ice, irdma: fix an off by one in error handling code (Kamal Heib) [RHEL-99206]
  - irdma: free iwdev->rf after removing MSI-X (Kamal Heib) [RHEL-99206]
  - RDMA/irdma: Switch to using the crc32c library (Kamal Heib) [RHEL-99206]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-188.el10]
changelog:
  - arm64: dts: freescale: Add GMAC Ethernet for S32G2 EVB and RDB2 and S32G3 RDB3 (CKI Backport Bot) [RHEL-141789]
  - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc() (Jared Kangas) [RHEL-136697]
  - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc (Jared Kangas) [RHEL-136697]
  - pinctrl: s32: add missing pins definitions (Jared Kangas) [RHEL-136697]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-189.el10]
changelog:
  - selftests/mm: skip hugepage-mremap test if userfaultfd unavailable (Chunyu Hu) [RHEL-112331]
  - selftests/mm: skip thuge-gen test if system is not setup properly (Chunyu Hu) [RHEL-112331]
  - selftests/mm: use generic read_sysfs in thuge-gen test (Chunyu Hu) [RHEL-112331]
  - selftests/mm: extract read_sysfs and write_sysfs into vm_util (Chunyu Hu) [RHEL-112331]
  - selftests/mm: deduplicate default page size test results in thuge-gen (Chunyu Hu) [RHEL-112331]
  - selftests/mm: fix thuge-gen test name uniqueness (Chunyu Hu) [RHEL-112331]
  - selftests/mm: fix child process exit codes in ksm_functional_tests (Chunyu Hu) [RHEL-112331]
  - selftest/mm: fix ksm_funtional_test failures (Chunyu Hu) [RHEL-112331]
  - selftests/mm: add support to test 4PB VA on PPC64 (Chunyu Hu) [RHEL-112331]
  - mm/selftests: fix incorrect pointer being passed to mark_range() (Chunyu Hu) [RHEL-112331]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-190.el10]
changelog:
  - nvme: fix PCIe subsystem reset controller state transition (John Meneghini) [RHEL-137767]
  - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (John Meneghini) [RHEL-137767]
  - powerpc/eeh: Make EEH driver device hotplug safe (John Meneghini) [RHEL-137767] {CVE-2025-38576}
  - sched: Fix build for modules using set_tsk_need_resched() (Phil Auld) [RHEL-134848]
  - sched: Export hidden tracepoints to modules (Phil Auld) [RHEL-134848]
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132906] {CVE-2023-53034}
  - tick/sched: Limit non-timekeeper CPUs calling jiffies update (CKI Backport Bot) [RHEL-132754]
  - redhat: enable TDX host config (Paolo Bonzini) [RHEL-115483]
  - KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115483]
  - x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115483]
  - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115483]
  - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115483]
  - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115483]
  - x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115483]
  - x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-115483]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-191.el10]
changelog:
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-88203]
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138039] {CVE-2025-38349}
  - blk-mq: Abort suspend when wakeup events are pending (Ming Lei) [RHEL-137853]
  - fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137103] {CVE-2025-40271}
  - net: netdevsim: fix inconsistent carrier state after link/unlink (Xin Long) [RHEL-130765]
  - selftests: Add napi threaded busy poll test in `busy_poller` (Xin Long) [RHEL-130765]
  - net: Extend NAPI threaded polling to allow kthread based busy polling (Xin Long) [RHEL-130765]
  - netdevsim: set the carrier when the device goes up (Xin Long) [RHEL-130765]
  - net: Use NAPI_* in test_bit when stopping napi kthread (Xin Long) [RHEL-130765]
  - docs: remove obsolete description about threaded NAPI (Xin Long) [RHEL-130765]
  - net: prevent deadlocks when enabling NAPIs with mixed kthread config (Xin Long) [RHEL-130765]
  - selftests: drv-net: don't assume device has only 2 queues (Xin Long) [RHEL-130765]
  - selftests: drv-net: test the napi init state (Xin Long) [RHEL-130765]
  - net: update NAPI threaded config even for disabled NAPIs (Xin Long) [RHEL-130765]
  - net: Update threaded state in napi config in netif_set_threaded (Xin Long) [RHEL-130765]
  - net: define an enum for the napi threaded state (Xin Long) [RHEL-130765]
  - net: Use netif_threaded_enable instead of netif_set_threaded in drivers (Xin Long) [RHEL-130765]
  - net: Create separate gro_flush_normal function (Xin Long) [RHEL-130765]
  - net: s/dev_set_threaded/netif_set_threaded/ (Xin Long) [RHEL-130765]
  - Add support to set NAPI threaded for individual NAPI (Xin Long) [RHEL-130765]
  - net: stop napi kthreads when THREADED napi is disabled (Xin Long) [RHEL-130765]
  - net: gro: expose GRO init/cleanup to use outside of NAPI (Xin Long) [RHEL-130765]
  - net: gro: decouple GRO from the NAPI layer (Xin Long) [RHEL-130765]
  - netdevsim: support NAPI config (Xin Long) [RHEL-130765]
  - selftests: net: cleanup busy_poller.c (Xin Long) [RHEL-130765]
  - bus: mhi: host: pci_generic: Set DMA mask for VFs (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Reset QDU100 while the MHI driver is removed (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Add SRIOV support (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Read SUBSYSTEM_VENDOR_ID for VF's to check status (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: Add support for separate controller configurations for VF and PF (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: ep: Fix chained transfer handling in read path (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: Notify EE change via uevent (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - bus: mhi: host: pci_generic: Add support for all Foxconn T99W696 SKU variants (Jose Ignacio Tornos Martinez) [RHEL-132591]
  - net: mana: Handle hardware recovery events when probing the device (Maxim Levitsky) [RHEL-131892]
  - net: mana: Drop TX skb on post_work_request failure and unmap resources (Maxim Levitsky) [RHEL-131892]
  - net: mana: Handle SKB if TX SGEs exceed hardware limit (Maxim Levitsky) [RHEL-131892]
  - net: mana: Add standard counter rx_missed_errors (Maxim Levitsky) [RHEL-131892]
  - net: mana: Move hardware counter stats from per-port to per-VF context (Maxim Levitsky) [RHEL-131892]
  - net: mana: Fix incorrect speed reported by debugfs (Maxim Levitsky) [RHEL-131892]
  - net: mana: Support HW link state events (Maxim Levitsky) [RHEL-131892]
  - RDMA/mana_ib: Extend modify QP (Maxim Levitsky) [RHEL-131892]
  - net: mana: Reduce waiting time if HWC not responding (Maxim Levitsky) [RHEL-131892]
  - net: mana: Remove redundant netdev_lock_ops_to_full() calls (Maxim Levitsky) [RHEL-131892]
  - net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Maxim Levitsky) [RHEL-131892]
  - RDMA/mana_ib: Drain send wrs of GSI QP (Maxim Levitsky) [RHEL-131892]
  - net: hv_netvsc: fix loss of early receive events from host during channel open. (Maxim Levitsky) [RHEL-131892]
  - net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Maxim Levitsky) [RHEL-131892]
  - net: mana: Add speed support in mana_get_link_ksettings (Maxim Levitsky) [RHEL-131892]
  - net: mana: Add support for net_shaper_ops (Maxim Levitsky) [RHEL-131892]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129117] {CVE-2025-40154}


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.11-1
changelog:
  - fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Added translation using Weblate (Czech) (pavel.borecki@gmail.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore: Removed getSyspurposeCompliance (jhnidek@redhat.com)
  - chore: Do not call candlepin from GetSyspurposeStatus (jhnidek@redhat.com)
  - chore: Removed SyspurposeComplianceStatusCache (jhnidek@redhat.com)
  - fix: Require findutils in .spec file (jhnidek@redhat.com)
  - feat: Try to cache candlepin server capabilities (jhnidek@redhat.com)
  - solved a conflict in utils.py (jstavel@redhat.com)
  - CCT-744: integration tests for DBus Config object (jstavel@redhat.com)
  - CCT-1029: tests for Register with environment option (jstavel@redhat.com)
  - chore: Small changes in integration-tests/test_syspurpose.py
    (jhnidek@redhat.com)
  - chore: Small fixes in test_register_get_orgs.py (jhnidek@redhat.com)
  - chore: Small fixes of integration-tests/test_register.py (jhnidek@redhat.com)
  - chore: Small tweaks of bash script of integration tests (jhnidek@redhat.com)
  - chore(doc): Improved README.md for integration tests (jhnidek@redhat.com)
  - CCT-743: rebased (jstavel@redhat.com)
  - CCT-1600: fix applied, unified settings.toml to use the same name of
    valid_fields.json (jstavel@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CCT-742: integration tests for DBus Syspurpose object (jstavel@redhat.com)
  - CCT-1029: test for dbus method GetEnvironments (jstavel@redhat.com)
  - CCT-1097: added enable_content for registration tests (jstavel@redhat.com)
  - CCT-745: multi org credentials added (jstavel@redhat.com)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Than Ngo <than@redhat.com> - 1.1.19-13
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    Resolves: RHEL-86305


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Patsy Griffin <pfrankli@redhat.com> - 6.06-7
changelog:
  - Break up man-pages-additional-20140218.tar.xz (RHEL-101696)
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.


author: Jakub Čajka <jcajka@redhat.com> - 3:200-1
changelog:
  - Update to latest upstream version
  - Resolves: RHEL-20091, RHEL-20085, RHEL-20556, RHEL-47461 and RHEL-37248


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
    CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58058):
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb6 up to 0xb8;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
      revision 0xf4 up to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfa up to 0xfc;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20241112-1
changelog:
  - Update Intel CPU microcode to microcode-20241112 release, addresses
    CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67335):
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20250211-1
changelog:
  - Update Intel CPU microcode to microcode-20250211 release, addresses
    CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
    CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79184,
    RHEL-79185, RHEL-79188, RHEL-79189, RHEL-79191, RHEL-79193, RHEL-79203):
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
    - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
      revision 0x12c;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000390;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode at revision 0x2b000603;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c000390;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000390;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000603;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c000390;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c000390;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000390;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode at revision 0x2b000603;
    - Removal of 06-8f-06/0x10 microcode at revision 0x2c000390;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000603;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000390;
    - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4123;
    - Removal of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4123;
    - Removal of 06-ba-08/0xe0 microcode at revision 0x4123;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
      up to 0xd0003f5;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
      up to 0x10002c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
      up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
      up to 0x436;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
      to 0x9;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0x100 up to 0x102;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
      to 0x63;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
      to 0x12c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
      up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4123 up to 0x4124;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
      up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
      up to 0x21000291.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250512-1
changelog:
  - Add a caveat to provide ability to persistently disable SPR-EE updates
    beyond 0x2b0005c0 on systems where absence of latency spikes
    is more important than lack of the latest CVE mitigations.
    (RHEL-94853)
  - Update Intel CPU microcode to microcode-20250512 release, addresses
    CVE-2024-28956, CVE-2025-20103, CVE-2025-20054, CVE-2024-43420,
    CVE-2025-20623, CVE-2024-45332, CVE-2025-24495, CVE-2025-20012
    (RHEL-91227, RHEL-91242, RHEL-91234):
    - Addition of 06-8f-04/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-06/0x10 microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
    - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision
      0xa0000d1;
    - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision
      0x10003a2;
    - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
    - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) at revision 0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at
      revision 0x118;
    - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in
      intel-ucode/06-c6-02) at revision 0x118;
    - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision
      0x118;
    - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at
      revision 0x118;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003707 up to 0x5003901;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904
      up to 0x7002b01;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5
      up to 0xd000404;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0
      up to 0x10002d0;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up
      to 0x26;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6
      up to 0xca;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb8 up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up
      to 0x3c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up
      to 0x56;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfc up to 0x100;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000620 up to 0x2b000639;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38
      up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x436 up to 0x437;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up
      to 0xa;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436
      up to 0x437;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0x102 up to 0x104;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up
      to 0x100;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc
      up to 0x100;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe
      up to 0x102;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up
      to 0x64;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20
      up to 0x24;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330
      up to 0x3000341;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up
      to 0x12f;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12c up to 0x12f;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4124 up to 0x4128;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124
      up to 0x4128;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4124 up to 0x4128;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up
      to 0x1d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x38 up to 0x3a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x38 up to 0x3a;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x38 up to 0x3a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000291
      up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291
      up to 0x210002a9;


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20250812-1
changelog:
  - Update Intel CPU microcode to microcode-20250812 release
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000404
      up to 0xd000410;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002d0
      up to 0x10002e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0003f7 up to 0x2c000401;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000639 up to 0x2b000643;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x24
      up to 0x25;
    - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
      0xa0000d1 up to 0xa000100;
    - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
      0x10003a2 up to 0x10003d0;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000341
      up to 0x3000362;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4128 up to 0x4129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4128 up to 0x4129;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4128
      up to 0x4129;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4128 up to 0x4129;
    - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x11f up
      to 0x123;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x118 up
      to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) from revision 0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x118 up to 0x119;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
      from revision 0x118 up to 0x119;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
      0x118 up to 0x119;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x118 up to 0x119;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x210002a9 up to 0x210002b3;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002a9
      up to 0x210002b3.


author: Denys Vlasenko <dvlasenk@redhat.com> - 4:20251111-1
changelog:
  - Fix typo in /usr/share/microcode_ctl/ucode_with_caveats/intel-06-8f-08/config
    (RHEL-123517)
  - Update Intel CPU microcode to microcode-20251111 release (RHEL-128195)
    - Addition of 06-ae-01/0x97 microcode at revision 0x1000273;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000643 up to 0x2b000650;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000401 up to 0x2c000410;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000401 up to 0x2c000410;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000401 up to 0x2c000410;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000643 up to 0x2b000650;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000401 up to 0x2c000410;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000643 up to 0x2b000650;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x3a up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x3a
      up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x437 up to 0x43a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x437 up to 0x43a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x437 up to 0x43a;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0xa up
      to 0xb;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x437
      up to 0x43a;
    - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
      0xa000100 up to 0xa000124;
    - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
      0x10003d0 up to 0x10003f0;
    - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000362
      up to 0x3000382;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12f up
      to 0x132;
    - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
      revision 0x12f up to 0x132;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4129 up to 0x6133;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4129 up to 0x6133;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4129 up to 0x6133;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4129 up to 0x6133;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4129
      up to 0x6133;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4129 up to 0x6133;
    - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x123 up
      to 0x125;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1d up
      to 0x1e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x3a up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x3a up
      to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
      revision 0x3a up to 0x3d;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x3a up to 0x3d;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x3a up to 0x3d;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x3a up to 0x3d;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x3a up
      to 0x3d;
    - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
      revision 0x3a up to 0x3d;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x119 up
      to 0x11a;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
      intel-ucode/06-c5-02) from revision 0x119 up to 0x11a;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
      from revision 0x119 up to 0x11a;
    - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
      0x119 up to 0x11a;
    - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
      revision 0x119 up to 0x11a;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x210002b3 up to 0x210002c0;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002b3
      up to 0x210002c0.


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Leo Sandoval <lsandova@redhat.com> - 0.7.2-2
changelog:
  - Rebase several patches from upstream which:
    - Introduce --is-sb-enabled parameter and better return codes
    - Remove unused int_to_b64()
    - Show help on unsupported systems
  - Resolves: #RHEL-90836
  - Resolves: #RHEL-90839


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Vit Mojzis <vmojzis@redhat.com> - 0.30.0-21
changelog:
  - Improve "help/usage" message (RHEL-38477)
  - libnetlabel: fix a header file guard typo
  - netlabel-config: Fix IPv4/IPv6 addresses parsing in nlbl_reset_unlbl()
  - netlabel: Update man page to clarify SELinux labeling
  - tests: add a basic CALIPSO pass through test
  - doc: fix a typo in the netlabel-config man page


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Than Ngo <than@redhat.com> - 1.3.12-7
changelog:
  - Add, multipath - drmgr support
  - Fix, SMT state is not honored when new CPUs are added dynamically
  Resolves: RHEL-62938


author: Than Ngo <than@redhat.com> - 2.7.10-1
changelog:
  - Update to 2.7.10
    * Aadd support for multiple platform dumps
    * Add support for light path diagnostics for rtas events
    * Enable correct display of model and system-id for IPS Power systems
    * Fix call home feature for nvmf devices
    * Fix crash in rtas_errd due to invalid -f option values
    * Fix build warnings with GCC-15
  Resolves: RHEL-65188


author: John Kacur <jkacur@redhat.com> - 0.7.4-1
changelog:
  - Rebase to upstream version 0.7.4
  - Convert to pyproject-based build using pyproject.toml
  - Remove python3-six dependency (no longer needed)
  - Remove distutils patch (no longer needed with pyproject build)
  Resolves: RHEL-114904


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Miro Hrončok <mhroncok@redhat.com> - 2.32.4-1
changelog:
  - Update to 2.32.4
  - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs
  Resolves: RHEL-105460


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Jiri Hnidek <jhnidek@redhat.com> 8-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Various fixes in state management (tomatus777@gmail.com)
  - Upgrade to Patternfly 6 (tomatus777@gmail.com)
  - make eslint happy (tomatus777@gmail.com)
  - test: mock-insights should have /host_exists endpoint (pkoprda@redhat.com)
  - build: switch to esbuild (tomatus777@gmail.com)
  - build: fix installation of sub-man with newer Fedora (ptoscano@redhat.com)
  - refactor: Remove system purpose status (pkoprda@redhat.com)
  - refactor: Display status consistent with subscription-manager
    (pkoprda@redhat.com)
  - refactor: Simplify displaying of installed products (pkoprda@redhat.com)
  - Stop using deprecated translatable for html (jvanderwaa@redhat.com)


author: mhorky <mhorky@redhat.com> 9-1
changelog:
  - remove src/po.js (tomatus777@tomatus.cz)
  - translate placeholder strings (tomatus777@tomatus.cz)
  - index.html: fix import order and make localization work again (tomatus777@tomatus.cz)
  - Fixes: RHEL-111937


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100438)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744)
  - zipl: makedumpfile is required for ngdump support (RHEL-114661)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109214)
  - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.7-1
changelog:
  - Revert "Add policy for insights-core"
  Resolves: RHEL-110651
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110651


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.8-1
changelog:
  - Reapply "Add insights_core interfaces"
  Resolves: RHEL-112368
  - Reapply "Add policy for insights-core"
  Resolves: RHEL-112368


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.9-1
changelog:
  - Allow systemd-oomd watch tmpfs dirs
  Resolves: RHEL-106998
  - Allow systemd-oomd watch dbus pid sock files
  Resolves: RHEL-106998
  - Allow userdomain to connect to systemd-oomd over a unix socket
  Resolves: RHEL-106998
  - Allow 'oomctl dump' to interact with systemd-oomd
  Resolves: RHEL-106998
  - Basic functionality for systemd-oomd
  Resolves: RHEL-106998
  - Basic enablement for systemd-oomd
  Resolves: RHEL-106998
  - Remove permissive domains
  Resolves: RHEL-107038
  - Allow iptables manage its private fifo_files in /tmp
  Resolves: RHEL-83775
  - Allow ras-mc-ctl write to sysfs files
  Resolves: RHEL-86926
  - Allow nfs generator create and use netlink sockets
  Resolves: RHEL-111556
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.10-1
changelog:
  - Allow sshd-auth read generic proc files
  Resolves: RHEL-107732
  - Allow sshd-auth read and write user domain ptys
  Resolves: RHEL-107732
  - Allow sshd-session get attributes of sshd vsock socket
  Resolves: RHEL-107732
  - Adjust guest and xguest users policy for sshd-session
  Resolves: RHEL-107732
  - Update files_search_base_file_types()
  Resolves: RHEL-107732
  - Allow sshd-session read cockpit pid files
  Resolves: RHEL-107732
  - Add default contexts for sshd-seesion
  Resolves: RHEL-107732
  - Define types for new openssh executables
  Resolves: RHEL-107732
  - Allow ras-mc-ctl get attributes of the kmod executable
  Resolves: RHEL-102535
  - Define file equivalency for /var/opt
  Resolves: RHEL-116512
  - Update specfile triggers for DSP modules
  Resolves: RHEL-116044


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.11-1
changelog:
  - Allow iotop stream connect to systemd-userdbd
  Resolves: RHEL-105481
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-107589
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-124855
  - Allow nfsidmapd search virt lib directories
  Resolves: RHEL-68722
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.12-1
changelog:
  - Update kernel_secretmem_use()
  Resolves: RHEL-116154
  - Allow system_mail_t read apache system content conditionally
  Resolves: RHEL-114970
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-119619
  - Update specfile trigger for smartmontools
  Resolves: RHEL-113167


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.13-1
changelog:
  - Add the rpm_signal() interface
  Related: RHEL-107589
  - Allow tuned_t use its private tmpfs files
  Related: RHEL-107589
  - Allow samba-bgqd send to smbd over a unix datagram socket
  Resolves: RHEL-93731
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041
  - Confine redfish_finder - host api discovery service
  Resolves: RHEL-50299
  - Update policy for dhcpc_hook_t
  Resolves: RHEL-113937
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  Resolves: RHEL-113937
  - Allow systemd to map files under /sys
  Resolves: RHEL-132638


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.14-1
changelog:
  - Update ktls policy
  Resolves: RHEL-123737
  - Update policy for redfish-finder
  Resolves: RHEL-50299
  - Allow sshd-session read, write, and map ica tmpfs files
  Resolves: RHEL-138247
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  Resolves: RHEL-127721
  - Allow stalld map sysfs files
  Resolves: RHEL-135512
  - Allow aide get attributes of a filesystem with extended attributes
  Resolves: RHEL-121479
  - Label miscellaneous /dev/papr-* devices
  Resolves: RHEL-129839
  - Allow KDE Plasma Login Manager to function as a display manager
  Resolves: RHEL-135676
  - Update specfile trigger for openwsmand
  Resolves: RHEL-133024


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-8
changelog:
  - Backport upstream changes to jailify extraction directory
    Includes related gnulib changes to add openat2
    Fixes CVE-2025-45582


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.35-10
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)
  - upstream fix for savannah bug 64581, commit 51142180
    (crash with TAR_OPTIONS)
  - Backport fix for regression in the --no-overwrite-dir option
    Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
    in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html


author: David Cantrell <dcantrell@redhat.com> - 1:1.11.1-3
changelog:
  - Use %license for the COPYING file in the %files section
  - Convert the License tag to an SPDX expression


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1:1.6.0-8
changelog:
  - migrated to SPDX license
  - resolves: rhbz#2219549* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.6.0-5

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild


author: John Kacur <jkacur@redhat.com> - 0.19-14
changelog:
  - Update man page with cpu_power command
  - Fix show_threads -t and show_irqs -q to not match everything if no match
  - Fix run command failing to apply BATCH policy
  - Add -U and -K to the move command
  Resolves: RHEL-107914 RHEL-106070 RHEL-93776 RHEL-106068


author: John Kacur <jkacur@redhat.com> - 0.20-1
changelog:
  - Update to upstream version 0.20
  - Convert spec file to use pyproject-rpm-macros
  - Use %pyproject_buildrequires, %pyproject_build, %pyproject_install
  - Use %pyproject_save_files for automatic file list generation
  - Remove oscilloscope (unsupported in RHEL)
  Resolves: RHEL-114902, RHEL-83080


author: John Kacur <jkacur@redhat.com> - 0.20-2
changelog:
  - Add python3-pip, python3-setuptools, python3-wheel BuildRequires
  - Delete setup.py in %prep so pyproject.toml build is used
  - Compress man page during %prep similar to rteval
  - Install tuna script and compressed man page explicitly
  Resolves: RHEL-114902


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94809
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
    - functions: make calc_isolated_cores return CPU ranges
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: disable appropriate P-State drivers
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    - gui: fix the profile deleter script


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84740)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 6.0-67
changelog:
  - zipinfo: remove the extra %c that caused invalid reads
  - zipinfo: fix the whitespaces in the output
  - Zipbombs: Port Another patch, orinally made by Mark Adler
  - https://github.com/madler/unzip/commit/af0d07f95809653b669d88aa0f424c6d5aa48ba0
    Resolves: RHEL-59972
    Resolves: RHEL-6286


author: - Chung Chung <cchung@redhat.com> - 8.3.2.1-1
changelog:
  - Add vdocalculatesize utility.
  - Improve handling of corrupt index metadata.
  - Resolves: RHEL-129392


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fix causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-1
changelog:
  - Update to version 2.11 (RHEL-59010)
  - backport fix for known regression on brcmfmac (rhbz#2302577)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.11-4
changelog:
  - Use pkcs11 provider to resolve PKCS11 URIs (RHEL-86951)
  - De-clutter syslog from CTRL-EVENT-SIGNAL-CHANGE messages (RHEL-71344)


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


