# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Vladimír Beneš <vbenes@redhat.com>- 1:1.54.1-1
changelog:
  - Update to 1.54.1
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-115973)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.54.2-1
changelog:
  - Update to 1.54.2
  - Support setting protocol version of HSR/PRP (RHEL-122172)
  - Support interlink for HSR/PRP (RHEL-122175)
  - Improve logging of networking off (RHEL-122173 )
  - Don't delete unrelated OVS ports (RHEL-121104)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-1
changelog:
  - Update to later upstream release to address regressions (RHEL-56551)
  - Support rightca in ipsec section (RHEL-118819)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-122306)
  - Esp param properly exported (RHEL-122626)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789)
  - Support leftprotoport and rightprotoport options. (RHEL-130907)
  - Fix error on duplicate key 'phase2alg'. (RHEL-131233)
  - Fix import connection with RSA key. (RHEL-127863)


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-2
changelog:
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496]
  - Resolves: RHEL-109496
    ([Azure][WALA][RHEL-9] Missing man page)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572]
  - Resolves: RHEL-97572
    ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-2
changelog:
  - wla-Remove-10-azure-unmanaged-sriov.rules.patch [RHEL-124218]
  - Resolves: RHEL-124218
    ([Azure][WALA][RHEL-9] Remove 10-azure-unmanaged-sriov.rules)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Attila Lakatos <alakatos@redhat.com> - 0.16-105
changelog:
  RHEL 9.7 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-109912


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  RHEL 9.8.0 ERRATUM
  - rebase to 0.19.2
  Resolves: RHEL-110573
  - Switch to libnettle for hashing
  - prevent aide from crashing if database is a HTTPS URL
  Resolves: RHEL-76014
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1569


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-4
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  Resolves: RHEL-83776


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.2-1
changelog:
  - Fix typo in systemd service (jstodola)
    Resolves: RHEL-78272
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: INSTALLER-4148
    Resolves: RHEL-21691
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-82694
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-82694


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.7-1
changelog:
  - pyanaconda: payload: return exception details for payload failures
    (k.koukiou)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
    Resolves: RHEL-4705
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-16355
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-16355


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.8-1
changelog:
  - Fix: UnboundLocalError: local variable 'e' referenced before assignment
    (k.koukiou)
    Related to: RHEL-4705
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.9-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-85175
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-85175
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-114169


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.10-1
changelog:
  - Fixing authselect logical differences not resolved during backporting
    (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.11-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-36187


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Nick Clifton <nickc@redhat.com> - 12.96-1
changelog:
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105574)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Fail on RHEL or CentOS 10 because it's not supported
    Resolves: RHEL-67804
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-67807
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68374
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69311


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-92718


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104652
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92844
  - Provide compatibility for AAH naming
    Resolves: RHEL-94769
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-79820
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78636


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104652
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106558


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.10
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121559


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-67
changelog:
  - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-25
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74078
  - Include additional information in PartitioningError
    Resolves: RHEL-8005


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-26
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-8008
    Resolves: RHEL-8012


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-20
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-61224]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-61224]
  - Resolves: RHEL-61224
    (Configuring metric for default gateway is not working)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122]
  - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122]
  - Resolves: RHEL-71122
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] )


author: Jon Maloy <jmaloy@redhat.com> - 24.4-4
changelog:
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361]
  - Resolves: RHEL-76361
    ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-5
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703]
  - Resolves: RHEL-81703
    (DataSourceNoCloudNet network configuration is ineffective - c9s)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-6
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658]
  - Resolves: RHEL-88658
    (Cloud-Init Backport Optimization Features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615]
  - Fix missing patch [RHEL-101692]
  - Resolves: RHEL-100615
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7])
  - Resolves: RHEL-101692
    (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors")


author: Bob Mader <bob@redhat.com> - 0.1.7-2
changelog:
  - Initial build for EL9
  - Applying changes for gating - adding the .fmf directory
  - Resolves: RHEL-57044


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 3:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-112187


author: Jindrich Novy <jnovy@redhat.com> - 4:2.242.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
  - Related: RHEL-111919


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.8.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0
  - Related: RHEL-111919


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-131
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-8.el9
  - Related: RHEL-80816


author: Aashish Radhakrishnan <aaradhak@redhat.com> - 0.24.0-2
changelog:
  - Restore single-decimal precision to stream output
    Backport https://github.com/coreos/coreos-installer/pull/1654


author: Joel Capitao <jcapitao@redhat.com> - 0.24.0-3
changelog:
  - Use the full path for the 'root=' kernel arg when rootfs on mpath
    Backport https://github.com/coreos/coreos-installer/pull/1677


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.2.3.3op2-34
changelog:
  - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-35
changelog:
  - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Mark Wielaard <mjw@redhat.com> - 5.0-8
changelog:
  - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch
  - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch


author: Mark Wielaard <mjw@redhat.com> - 5.0-11
changelog:
  - Add 0001-Add-basic-find-debuginfo-script-tests.patch
  - Add debugedit-5.0-find-debuginfo-tests-fixups.patch


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Evan Goode <egoode@redhat.com> - 4.14.0-30
changelog:
  - Mark transient transactions in DNF history (RHEL-84512)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84499)


author: Evan Goode <egoode@redhat.com> - 4.14.0-31
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-65817)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Pavel Valena <pvalena@redhat.com> - 057-101.git20250808
changelog:
  - fix(systemd): add missing modprobe@.service
  - fix: let check_vol_slaves_all return 1 when checks on all
  - improvement(74nvmf): lookup required NIC kernel modules for
  - fix(74nvmf): set root=nvmf
  - chore(multipath): remove `rd_NO_MULTIPATH` kernel command
  - refactor(multipath): remove custom multipathd.service
  - fix(systemd): systemd.volatile needs overlayfs kernel module
  - refactor(dracut): introduce clamp_mtimes helper function
  - fix(dracut): ensure hardlink deduplication is reproducible


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
  have expected alignment due to some attribute usage that then causes
  problems with BTF trampolines due to lack of expressiveness in BTF to
  signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
  encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
  like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
  explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
  nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.    
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
  and current branch, i.e. 'next'.


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-3
changelog:
  - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865]
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019]
  - Resolves: RHEL-70865
    (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7])
  - Resolves: RHEL-83019
    (The newer revocation file and Server 2025 required to update it [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-4
changelog:
  - edk2-update-dbx-to-20250610.patch [RHEL-96869]
  - Resolves: RHEL-96869
    ([edk2,rhel-9] dbx update 20250610)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-5
changelog:
  - edk2-MdePkg-Acpi66.h-Add-ACPI-6.6-header.patch [RHEL-109010]
  - edk2-OvmfPkg-WorkArea.h-Add-MAILBOX_GDT.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-Test-command-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-ResetVector-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-TdxDxe-Support-5-level-paging-for-ResetVecto.patch [RHEL-109010]
  - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-69780]
  - Resolves: RHEL-109010
    (TD guest dmesg reports ACPI BIOS Warning (bug): Incorrect checksum in table [APIC] - 0x29)
  - Resolves: RHEL-69780
    (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.8])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-6
changelog:
  - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-121983]
  - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-121983]
  - edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-121983]
  - edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-121983]
  - Resolves: RHEL-121983
    ([edk2] VM panic on booting SNP guest with large memory on Genoa)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-7
changelog:
  - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126100]
  - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126100]
  - Resolves: RHEL-126100
    ([edk2,rhel-9] dbx update to 20251016 / v1.6.1)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-8
changelog:
  - edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115922]
  - edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115922]
  - Resolves: RHEL-115922
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-9.8])


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-18
changelog:
  - Fix nsm-should-check for "google.com" failure (RHEL-94297)
  - Fix package tests for tetris no longer existing as a package (RHEL-94297)
  - Introduce untrusted-content variable (RHEL-94297)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 9.7.0 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-63090
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-59626
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-21871
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-30020
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-69136


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-87
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83255


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-88
changelog:
  - fence_compute/fence_evacuate: dont use deprecated inspect.getargspec()
    Resolves: RHEL-84448
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79798


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Eric Garver <egarver@redhat.com> - 1.3.4-6
changelog:
  - feat(IPv6_rpfilter): support loose rpfilter
  - feat(IPv6_rpfilter): support loose-forward rpfilter
  - feat(IPv6_rpfilter): support strict-forward rpfilter


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83109


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-9
changelog:
  - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
  - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch.  This test
    should be covered by gdb.base/watchpoint-unaligned.exp which was
    added upstream in commit a3b60e4588606354b93508a0008a5.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Joan Torres <joantolo@redhat.com> - 40.1-31
changelog:
  - Fix legacy-xorg session switching
    The fix that intended to fix the issue wasn't complete and also,
    introduced a bug on user switching for non legacy-xorg servers.
    This fix addresses both issues.
  - Avoid waiting 10s when starting GDM in legacy-xorg mode
    Resolves: RHEL-72694


author: Joan Torres <joantolo@redhat.com> - 40.1-32
changelog:
  - Leave session-opened signature the same as before and use a new
    session-opened-with-session-id signal to keep ABI compatibility
    Related: RHEL-46383


author: Joan Torres <joantolo@redhat.com> - 40.1-35
changelog:
  - Instead of allowing adding custom parameters to Xorg,
    only allow adding -nocursor. Allowing adding custom parameters
    is a potential security issue.
    Related: RHEL-81194


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Josef Ridky <jridky@redhat.com> - 2:3.0.4-2
changelog:
  - fix CVE-2025-10920
  - fix CVE-2025-10921
  - fix CVE-2025-10922
  - fix CVE-2025-10923
  - fix CVE-2025-10924
  - fix CVE-2025-10925
  - fix CVE-2025-10934


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-17
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94483
  - Resolves: RHEL-102844


author: Frédéric Bérat <fberat@redhat.com> - 2.34-244
changelog:
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT version to enable DT_X86_64_PLT	
    compatibility. (RHEL-109622)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Olivier Fourdan <ofourdan@redhat.com> - 40.0-8
changelog:
  - Add Xwayland and dbus-daemon as weak dependencies
    Resolves: https://issues.redhat.com/browse/RHEL-66572


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Joan Torres <joantolo@redhat.com> - 40.1.1-11
changelog:
  - Add race fixes needed when terminating a conflicting session
    on GDM greeter.
    Resolves: RHEL-92341


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Joan Torres <joantolo@redhat.com> - 40.10-30
changelog:
  - Fix regression on multiple remote sessions and same user
    Also, add missing fix to keep API/ABI compatibility on GDM greeter proxy.
    Resolves: RHEL-109190


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-1
changelog:
  - rebase to 3.8.10
  - revert defaulting to PBMAC1 in FIPS mode
  - revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification


author: David Benoit <dbenoit@redhat.com> - 1.24.3-3
changelog:
  - Update to Go 1.24.3 (fips-3)
  - Fix linkage issue in bin/go
  - Fix loading issue in non-fips mode
  - Related: RHEL-83439
  - Related: RHEL-87632


author: Alejandro Sáez <asm@redhat.com> - 1.25.0-1
changelog:
  - Update to Go 1.25.0
  - Set GOAMD64 to v2 to align with new architecture baselines
  - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2
  - Resolves: RHEL-109557


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-15
changelog:
  - Resolves RHEL-97518: Rework grafana-selinux spec file sections
  - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-18
changelog:
  - Resolves RHEL-125696: CVE-2025-58183
  - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.15.5-3
changelog:
  - Moved greenboot config to /etc/grub.d.
  - %post symlink greenboot.cfg to bootupd if present
  - %postun remove symlink from bootupd if present


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Antonio Murdaca <antoniomurdaca@gmail.com> - 0.15.8-1
changelog:
  * ci: add ci test for pull request by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/164
   * ci: add more wait time for fallback by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/167
   * ci: fix ansible check failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/169
   * ci: add test case of bootc anaconda iso by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/171
   * test github token by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/174
   * update github action by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/177
   * Update greenboot-ci.yaml by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/179
   * ci: fix iso case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/173
   * ci: add support for fedora rawhide by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/181
   * ci: fix rahide failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/183
   * ci: fix podman retry issue by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/185
   * ci: add centos-stream-9 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/187
   * ci: add rhel 9.6 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/190
   * ci: fix rhel 9.6 anaconda case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/193
   * ci: fix secret error by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/195
   * specfile: Stop building on ix86 by @travier in https://github.com/fedora-iot/greenboot/pull/197
   * rollback: if no bootc, fallback to rpm-ostree by @runcom in https://github.com/fedora-iot/greenboot/pull/199
   * fix:fail early for any required script failure by @say-paul in https://github.com/fedora-iot/greenboot/pull/198
   * Release 0.15.8 by @runcom in https://github.com/fedora-iot/greenboot/pull/202

   * @travier made their first contribution in https://github.com/fedora-iot/greenboot/pull/197

   **Full Changelog**: https://github.com/fedora-iot/greenboot/compare/v0.15.7...v0.15.8
  - Resolves: RHEL-78244


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-4
changelog:
  - Add support for nbd+unix:// URIs
    resolves: RHEL-33956
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-36634


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56811
  - Replace Jansson with json-c
    resolves: RHEL-65294


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83036


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-112184


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.8.14-2
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120178


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7
changelog:
  - Resolves: RHEL-99815 - stickysession field does not work when specifying
    it in the query parameter after upgrade to 9.5
  - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99968 - httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-8
changelog:
  - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-9
changelog:
  - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-10
changelog:
  - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix
  - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.43.20190303git
changelog:
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902]
  - Resolves: RHEL-9902
    ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.44.20190303git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812]
  - Resolves: RHEL-95812
    ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
changelog:
  - Re-sync with upstream changes adding ignition-grub subpackage
    and a few minor changes
  - New release


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.2-1
changelog:
  - fix: add missed optional deps for ls datasources (#4495)
    (xiangceliu@redhat.com)
  - feat: Add error_lines to LSlHFiles parser (#4494) (jiazhang@redhat.com)
  - fix: discard distutils (LooseVersion) in version comparison (#4490)
    (xiangceliu@redhat.com)
  - fix: endless loop caused by Mount.get_dir()  (#4489) (jiazhang@redhat.com)
  - chore: Add ceph new versions 2025_0701 (#4488) (jiazhang@redhat.com)
  - feat(client): Get list of reports for system in more efficient way (#4459)
    (pkoprda@redhat.com)
  - feat(tests): create 8 empty __init__.py files (#4492) (pschrimp@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.3-1
changelog:
  - feat(client): Exclude vendor libs from coverage stats (#4520)
    (pschrimp@redhat.com)
  - fix: handle error from relied spec for container_nginx_conf (#4514)
    (xiaoxwan@redhat.com)
  - fix: enhance RpmVPackage handles the rpm error message (#4521)
    (39508521+shlao@users.noreply.github.com)
  - fix: Enhance "IpLinkInfo" to keep the bond or slave options (#4522)
    (44796653+huali027@users.noreply.github.com)
  - chore: do not collect ls_dev anymore in core collection (#4453)
    (xiangceliu@redhat.com)
  - Replace pkg_resources with importlib.metadata (Python 3.8+) (#4500)
    (miro@hroncok.cz)
  - fix(client): remove unused format_config() function (#4519)
    (pkoprda@redhat.com)
  - fix: compatibility of version_compare (#4518) (xiangceliu@redhat.com)
  - fix: arguments passed to rpm.labelCompare (#4516) (xiangceliu@redhat.com)
  - fix: rpm_vercmp can't compare pkgs with different version length (#4515)
    (xiangceliu@redhat.com)
  - fix(spec): limit to last 10 files for eap_json_reports (#4509)
    (xiaoxwan@redhat.com)
  - chore(rpmcmp): use rpm.labelCompare first (#4501) (xiangceliu@redhat.com)
  - fix: ComplianceClient support general data collection (#4503)
    (xiangceliu@redhat.com)
  - fix: use tempfile.gettempdir as default tmpdir for obfuscation reports
    (#4496) (xiangceliu@redhat.com)
  - chore: enhance YAMLParser to parse yaml files containing = as value (#4508)
    (30404410+qinpingli@users.noreply.github.com)
  - fix: subman.identity supports multiple languages (#4505)
    (xiangceliu@redhat.com)
  - perf(client): add check before retrieving report (#4502)
    (pschrimp@redhat.com)
  - chore(ci/cd): update the codecov actions to v5 (#4504)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.4-1
changelog:
  - chore: print warning when 'subscription_manager_id' is skipped for redaction
    (#4527) (xiangceliu@redhat.com)
  - chore: update MANIFEST.in accordingly (#4531) (xiangceliu@redhat.com)
  - fix: container spec exec with env and cmd precheck (#4513)
    (xiaoxwan@redhat.com)
  - fix: console messsags for --compliance-unassign (#4530)
    (xiangceliu@redhat.com)
  - feat: Add parser and spec for compliance_policies_enabled (#4498)
    (jiazhang@redhat.com)
  - chore: Move parser "WatchDogLog" to "watchdog.py" file (#4529)
    (44796653+huali027@users.noreply.github.com)
  - fix: reduce the size of CalledProcessError exception (#4528)
    (xiangceliu@redhat.com)
  - chore(spec): remove unused *_config_perms from collection (#4526)
    (xiangceliu@redhat.com)
  - feat: New spec "/etc/watchdog.conf" and the parser (#4523)
    (44796653+huali027@users.noreply.github.com)
  - feat(client): suppress link message after upload (#4517)
    (pschrimp@redhat.com)
  - fix: hostname obfuscation issue in particular specs (#4511)
    (xiangceliu@redhat.com)
  - fix: override LANG to 'C.UTF-8' for subscription-manager (#4506)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.5-1
changelog:
  - Revert "feat: Add parser and spec for compliance_policies_enabled (#4498)"
    (#4534) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.6-1
changelog:
  - fix: revert the cmd&args key for CommandOutputProvider in meta_data (#4539)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.7.1-1
changelog:
  - fix(parser/sshd_config): keep inline comments when parsing config lines
    (#4546) (tayushi1610@gmail.com)
  - feat: New parser MdatpManaged and the spec (#4562)
    (39508521+shlao@users.noreply.github.com)
  - fix(doc): add required configuration for readthedocs (#4565)
    (xiangceliu@redhat.com)
  - chore(doc): update the guide steps for PR to 3.0_egg (#4566)
    (xiangceliu@redhat.com)
  - fix: handle error lines of spec grubby_default_index (#4538)
    (xiaoxwan@redhat.com)
  - fix: Skip RpmVPackage only when no error and no installed (#4550)
    (39508521+shlao@users.noreply.github.com)
  - feat: Add spec and parser for compliance_policies_enabled (#4536)
    (jiazhang@redhat.com)
  - chore(script): update RPM script to use Python virtual env (#4561)
    (xiangceliu@redhat.com)
  - fix: revert the ls specs removed by mistake (#4554) (xiangceliu@redhat.com)
  - fix: exclude irrelevant logrotate configuration files (#4551)
    (xiangceliu@redhat.com)
  - doc: add RPM delivery notes to contributing (#4545) (xiangceliu@redhat.com)
  - fix: don't immediately exit collection when inventory_id is unavailable
    (#4537) (xiangceliu@redhat.com)
  - chore: sync the tito required file to master (#4547) (xiangceliu@redhat.com)
  - feat: onboard packit for build RPM on master branch (#4542)
    (xiangceliu@redhat.com)
  - fix(client): Suppress link message after upload (#4544) (mhorky@redhat.com)
  - chore: sync the changelog with the 3.0 branch (#4540) (xiangceliu@redhat.com)
  - chore: update RPM building scripts and spec file (#4533)
    (xiangceliu@redhat.com)
  - feat: New spec and parser for '/var/log/foreman-installer/foreman.log'
    (#4535) (143097963+atewari-rh@users.noreply.github.com)
  - chore: merge the two RPM build scripts (#4532) (xiangceliu@redhat.com)
  - feat: new script to build insights-core RPM (#4507) (xiangceliu@redhat.com)
  - chore: Introduce Client phase v2 (#4512) (mhorky@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.8.1-1
changelog:
  - chore(spec): Add back spec vmware_tools_conf (#4595) (jiazhang@redhat.com)
  - fix: use try_auto_configuration method for compliance (#4591)
    (xiangceliu@redhat.com)
  - fix(client): do not retry upload on successful upload (#4586)
    (pschrimp@redhat.com)
  - chore(script): update the file name typo in last operation (#4588)
    (xiangceliu@redhat.com)
  - chore: place the build target in spec instead of passing macro (#4587)
    (xiangceliu@redhat.com)
  - chore: refine the pull request template (#4585) (xiangceliu@redhat.com)
  - fix: Enhance spec 'filefrag' to check initramfs/vmlinuz files (#4574)
    (39508521+shlao@users.noreply.github.com)
  - fix: add dep ds containers_with_shell for container specs (#4581)
    (xiaoxwan@redhat.com)
  - chore: remove the unused build scripts (#4577) (xiangceliu@redhat.com)
  - fix: do not collect egg_release file in RPM delivery (#4573)
    (xiangceliu@redhat.com)
  - chore(ci/cd): do not build Egg for PRs to matser (#4578)
    (xiangceliu@redhat.com)
  - New parser for sos_commands/crio/crictl_ps (#4497) (aghodake@redhat.com)
  - fix(test): regression issue of yaml.SafeLoader in testing (#4557)
    (xiangceliu@redhat.com)
  - fix: no valid conf found issue in combiner GrubConf (#4437)
    (xiaoxwan@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.1-1
changelog:
  - chore(spec): change ip_route_show_table_all to filterable=True (#4597)
    (xiangceliu@redhat.com)
  - Alter malware code to use locally stored yara rules for the 3rd party feature
    (#4571) (63891960+mtclinton@users.noreply.github.com)
  - fix: collect yum_updates on all supported RHEL (#4607)
    (xiangceliu@redhat.com)
  - fix(MANIFEST): add the 'public.gpg' required by playbook_verifier (#4602)
    (xiangceliu@redhat.com)
  - chore(spec): do not collect ansible_telemetry before it's GA (#4601)
    (xiangceliu@redhat.com)
  - fix: remove the deps from insights_ausearch spec (#4603)
    (xiangceliu@redhat.com)
  - fix(doc): fix homepage example in README (#4599) (xiangceliu@redhat.com)
  - fix(rpm-spec): fix "Requires:" of selinux-policy (#4580)
    (xiangceliu@redhat.com)
  - feat: add parser for spec.nvidia_smi_query_gpu (#4600) (xiaoxwan@redhat.com)
  - feat(spec/parser): new spec and parser for AnsibleTelemetry (#4589)
    (xiangceliu@redhat.com)
  - fix: FileProvider.validate() leaked files outside root (#4474)
    (71874510+jholecek-rh@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.3-1
changelog:
  - spec: new spec and parser for krb5_localauth_plugin (#4632)
    (xiangceliu@redhat.com)
  - chore(uname): Support RHEL 9.7 in Uname (#4631) (jiazhang@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.10.1-1
changelog:
  - fix(spec): ignore errors when collecting bootloader data (#4636)
    (xiangceliu@redhat.com)
  - fix(spec): keyctl_show should be a simple_command (#4635)
    (xiangceliu@redhat.com)
  - Add new parser & datasource for ls -ldZ (#4622) (986222045@qq.com)
  - fix: enhance IlabModuleList parser on content change (#4624)
    (xiaoxwan@redhat.com)
  - chore(spec): don't need strictly version match (#4634)
    (xiangceliu@redhat.com)
  - chore: Update the base of SsTUPNA (#4619) (xiangceliu@redhat.com)
  - Add spec rear_default_conf (#4625) (jiazhang@redhat.com)
  - chore: Uname supports RHEL 10.1 (#4643) (xiangceliu@redhat.com)
  - spec: new datasource & parser for ls -ldH (#4620) (986222045@qq.com)
  - fix(script): revert to update setup.py (#4623) (xiangceliu@redhat.com)
  - fix(script): tarbal cannot be found when building for testing (#4621)
    (xiangceliu@redhat.com)
  - chore(script): change release to 'dev' for PR testing builds (#4618)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec bootctl_status for analytics (#4613)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec mokutil_list_enrolled for analytics (#4612)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec keyctl_show for analytics (#4611)
    (xiangceliu@redhat.com)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-88900 [RFE] Add check on CA cert expiry for ipa-cert-fix
  - Resolves: RHEL-88037 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86483 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-41178 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-95010 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93890 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-93887 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-93483 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-88834 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-19
changelog:
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89907 Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99315 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-98565 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96920 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-31907 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-20
changelog:
  - Resolves: RHEL-106285 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-106026 Include fixes in python3-ipatests package
  - Resolves: RHEL-105512 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101707 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-101544 ipa-client-encrypted-dns does not ensure bind-utils >= 9.18 for DoT-compatible nsupdate
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24
changelog:
  - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-25
changelog:
  - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9]
  - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9]
  - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9]
  - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9]
  - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package 
  - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8]
  - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-2
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86967
  - Resolves: RHEL-86620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-3
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101648
  - Resolves: RHEL-102312
  - Resolves: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-119329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118767
  - Resolves: RHEL-119455


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118767
  - Related: RHEL-119455
  - Related: RHEL-118775


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118774
  - Related: RHEL-119466


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Christine Caulfield <ccaulfie@redhat.com> - 2.2.8-6
changelog:
  - fix "Keepalived claims that blackhole route doesn't have interface and can't be tracked"
    Resolves: RHEL-40520


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-640.el9]
changelog:
  - kernfs: Fix UAF in polling when open file is released (Pavel Reichl) [RHEL-122088] {CVE-2025-39881}
  - crypto: iaa - mark as supported (Vladis Dronov) [RHEL-95629]
  - dmaengine: idxd: Add a new IAA device ID for Wildcat Lake family platforms (Vladis Dronov) [RHEL-95629]
  - crypto: iaa - Optimize rebalance_wq_table() (Vladis Dronov) [RHEL-95629]
  - crypto: iaa - Adjust workqueue allocation type (Vladis Dronov) [RHEL-95629]
  - fs: Add 'initramfs_options' to set initramfs mount options (Ian Kent) [RHEL-121113]
  - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123108] {CVE-2025-39898}
  - Configs: Enable CONFIG_SCHED_MC for powerpc (Phil Auld) [RHEL-118964]
  - sched: Unify the SCHED_{SMT,CLUSTER,MC} Kconfig (Phil Auld) [RHEL-118964]
  - sched: Move STDL_INIT() functions out-of-line (Phil Auld) [RHEL-118964]
  - sched/fair: Get rid of sched_domains_curr_level hack for tl->cpumask() (Phil Auld) [RHEL-118964]
  - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled (Phil Auld) [RHEL-118964]
  - x86/smpboot: moves x86_topology to static initialize and truncate (Phil Auld) [RHEL-118964]
  - x86/smpboot: remove redundant CONFIG_SCHED_SMT (Phil Auld) [RHEL-118964]
  - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup (Phil Auld) [RHEL-118964]
  - powerpc/smp: Dynamically build Powerpc topology (Phil Auld) [RHEL-118964]
  - powerpc/smp: Avoid asym packing within thread_group of a core (Phil Auld) [RHEL-118964]
  - powerpc/smp: Add __ro_after_init attribute (Phil Auld) [RHEL-118964]
  - powerpc/smp: Disable MC domain for shared processor (Phil Auld) [RHEL-118964]
  - powerpc/smp: Enable Asym packing for cores on shared processor (Phil Auld) [RHEL-118964]
  - perf/x86/intel/uncore: Add iMC freerunning for Panther Lake (Michael Petlan) [RHEL-47456]
  - perf/x86/intel/uncore: Add Panther Lake support (Michael Petlan) [RHEL-47456]
  - perf/x86/intel/uncore: Support customized MMIO map size (Michael Petlan) [RHEL-47442 RHEL-47456]
  - perf/x86/intel/uncore: Support MSR portal for discovery tables (Michael Petlan) [RHEL-47442 RHEL-47456]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-641.el9]
changelog:
  - tools/power/x86/intel-speed-select: v1.23 release (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Skip uncore frequency update (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Support SST PP revision 2 fields (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: v1.22 release (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Prefix header search path with sysroot (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Die ID for IO dies (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Fix the condition to check multi die system (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Prevent increasing MAX_DIE_PER_PACKAGE (David Arcari) [RHEL-125240]
  - selftests: livepatch: test if ftrace can trace a livepatched function (Joe Lawrence) [RHEL-114920]
  - selftests: livepatch: add new ftrace helpers functions (Joe Lawrence) [RHEL-114920]
  - samples/livepatch: add module descriptions (Joe Lawrence) [RHEL-114920]
  - selftest/livepatch: Only run test-kprobe with CONFIG_KPROBES_ON_FTRACE (Joe Lawrence) [RHEL-114920]
  - docs: livepatch: move text out of code block (Joe Lawrence) [RHEL-114920]
  - livepatch: Add comment to clarify klp_add_nops() (Joe Lawrence) [RHEL-114920]
  - xfs: rework datasync tracking and execution (Pavel Reichl) [RHEL-113841]
  - xfs: rearrange code in xfs_inode_item_precommit (Pavel Reichl) [RHEL-113841]
  - dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-115369]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-642.el9]
changelog:
  - kernel: extend rh_waived to cope better with the CVE mitigations case (Ricardo Robaina) [RHEL-122981]
  - Add support to rh_waived cmdline boot parameter (Ricardo Robaina) [RHEL-122981]
  - rh_flags: Rename rh_features to rh_flags (Ricardo Robaina) [RHEL-122981]
  - kernel: rh_features: fix reading empty feature list from /proc (Ricardo Robaina) [RHEL-122981]
  - rh_features: move rh_features entry to sys/kernel (Ricardo Robaina) [RHEL-122981]
  - rh_features: convert to atomic allocation (Ricardo Robaina) [RHEL-122981]
  - add rh_features to /proc (Ricardo Robaina) [RHEL-122981]
  - add support for rh_features (Ricardo Robaina) [RHEL-122981]
  - dlm: fix lkb timeout scanning lookup (Alexander Aring) [RHEL-82137]
  - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110034]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-643.el9]
changelog:
  - s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-129168]
  - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129201]
  - x86/topology: Implement topology_is_core_online() to address SMT regression (David Arcari) [RHEL-125289]
  - tools/power turbostat: Fix incorrect sorting of PMT telemetry (David Arcari) [RHEL-127415]
  - dma-mapping: fix missing clear bdr in check_ram_in_range_map() (Prarit Bhargava) [RHEL-128293]
  - net/mlx5: fs, fix UAF in flow counter release (CKI Backport Bot) [RHEL-124427] {CVE-2025-39979}
  - uprobes: Fix race in uprobe_free_utask (Viktor Malik) [RHEL-120479]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-644.el9]
changelog:
  - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-129896]
  - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-128358]
  - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-128358]
  - mm/uffd: add missing pte_mkdirty() to mfill_atomic_install_pte() (Lucas Oakley) [RHEL-46006]
  - Bluetooth: revert TX timestamping (David Marlin) [RHEL-119045]
  - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 (David Marlin) [RHEL-119045]
  - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (David Marlin) [RHEL-119045]
  - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-119045] {CVE-2025-39981}
  - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (David Marlin) [RHEL-119045] {CVE-2025-39982}
  - Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (David Marlin) [RHEL-119045] {CVE-2025-39983}
  - Bluetooth: hci_sync: Fix hci_resume_advertising_sync (David Marlin) [RHEL-119045]
  - Bluetooth: Fix build after header cleanup (David Marlin) [RHEL-119045]
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (David Marlin) [RHEL-119045] {CVE-2025-39860}
  - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early (David Marlin) [RHEL-119045] {CVE-2025-39861}
  - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: Mark connection as closed during suspend disconnect (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success (David Marlin) [RHEL-119045]
  - Bluetooth: hci_conn: Make unacked packet handling more robust (David Marlin) [RHEL-119045]
  - Bluetooth: btnxpuart: Uses threaded IRQ for host wakeup handling (David Marlin) [RHEL-119045]
  - Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established (David Marlin) [RHEL-119045]
  - Bluetooth: hci_core: Fix using ll_privacy_capable for current settings (David Marlin) [RHEL-119045]
  - Bluetooth: hci_core: Fix using {cis,bis}_capable for current settings (David Marlin) [RHEL-119045]
  - Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown (David Marlin) [RHEL-119045]
  - Bluetooth: hci_sync: Avoid adding default advertising on startup (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: Mask data status from LE ext adv reports (David Marlin) [RHEL-119045]
  - Bluetooth: btintel_pcie: Fix Alive Context State Handling (David Marlin) [RHEL-119045]
  - Bluetooth: btintel_pcie: Make driver wait for alive interrupt (David Marlin) [RHEL-119045]
  - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (David Marlin) [RHEL-119045] {CVE-2025-38593}
  - Bluetooth: btusb: Add one more ID 0x28de:0x1401 for Qualcomm WCN6855 (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Sort WCN6855 device IDs by VID and PID (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: QCA: Support downloading custom-made firmwares (David Marlin) [RHEL-119045]
  - Bluetooth: btnxpuart: Add uevents for FW dump and FW download complete (David Marlin) [RHEL-119045]
  - Bluetooth: btnxpuart: Correct the Independent Reset handling after FW dump (David Marlin) [RHEL-119045]
  - Bluetooth: ISO: Support SCM_TIMESTAMPING for ISO TS (David Marlin) [RHEL-119045]
  - Bluetooth: ISO: add socket option to report packet seqnum via CMSG (David Marlin) [RHEL-119045]
  - Bluetooth: btintel: Define a macro for Intel Reset vendor command (David Marlin) [RHEL-119045]
  - Bluetooth: Fix typos in comments (David Marlin) [RHEL-119045]
  - Bluetooth: RFCOMM: Fix typos in comments (David Marlin) [RHEL-119045]
  - Bluetooth: aosp: Fix typo in comment (David Marlin) [RHEL-119045]
  - Bluetooth: hci_bcm4377: Fix typo in comment (David Marlin) [RHEL-119045]
  - Bluetooth: btrtl: Fix typo in comment (David Marlin) [RHEL-119045]
  - Bluetooth: btmtk: Fix typo in log string (David Marlin) [RHEL-119045]
  - Bluetooth: btintel: Fix typo in comment (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Add RTL8852BE device 0x13d3:0x3618 (David Marlin) [RHEL-119045]
  - Bluetooth: btnxpuart: implement powerup sequence (David Marlin) [RHEL-119045]
  - Bluetooth: Fix spelling mistakes (David Marlin) [RHEL-119045]
  - Bluetooth: btnxpuart: Add support for 4M baudrate (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: Correct comment about HCI_EV_EXTENDED_INQUIRY_RESULT (David Marlin) [RHEL-119045]
  - Bluetooth: hci_core: Eliminate an unnecessary goto label in hci_find_irk_by_addr() (David Marlin) [RHEL-119045]
  - Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (David Marlin) [RHEL-119045]
  - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (David Marlin) [RHEL-119045]
  - Bluetooth: hci_qca: Enable ISO data packet RX (David Marlin) [RHEL-119045]
  - Bluetooth: btintel_pcie: Add support for device 0x4d76 (David Marlin) [RHEL-119045]
  - Bluetooth: Remove hci_conn_hash_lookup_state() (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Add a new VID/PID 2c7c/7009 for MT7925 (David Marlin) [RHEL-119045]
  - Bluetooth: btintel_pcie: Reword restart to recovery (David Marlin) [RHEL-119045]
  - Bluetooth: btintel_pcie: Support Function level reset (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID 13d3:3601) (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Clean up some Bluetooth device IDs (David Marlin) [RHEL-119045]
  - netlink: avoid infinite retry looping in netlink_unicast() (Davide Caratti) [RHEL-115649] {CVE-2025-38727}
  - genetlink: fix genl_bind() invoking bind() after -EPERM (Davide Caratti) [RHEL-115649] {CVE-2025-39926}
  - netlink: make sure we allow at least one dump skb (Davide Caratti) [RHEL-115649]
  - netlink: Fix rmem check in netlink_broadcast_deliver(). (Davide Caratti) [RHEL-115649]
  - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Davide Caratti) [RHEL-115649] {CVE-2025-38465}
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-121298]
  - octeon_ep_vf: Add support to retrieve hardware channel information (Kamal Heib) [RHEL-111113]
  - octeon_ep: Add support to retrieve hardware channel information (Kamal Heib) [RHEL-111113]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-645.el9]
changelog:
  - tty: n_tty: Fix buffer offsets when lookahead is used (Radostin Stoyanov) [RHEL-127716]
  - ext4: don't over-report free space or inodes in statvfs (Ravi Singh) [RHEL-125357]
  - dpll: add phase-adjust-gran pin attribute (Petr Oros) [RHEL-126530]
  - dpll: fix device-id-get and pin-id-get to return errors properly (Petr Oros) [RHEL-126530]
  - dpll: spec: add missing module-name and clock-id to pin-get reply (Petr Oros) [RHEL-126530]
  - dpll: add phase_offset_avg_factor_get/set callback ops (Petr Oros) [RHEL-126530]
  - dpll: add phase-offset-avg-factor device attribute to netlink spec (Petr Oros) [RHEL-126530]
  - dpll: fix clock quality level reporting (Petr Oros) [RHEL-126530]
  - dpll: add reference sync get/set (Petr Oros) [RHEL-126530]
  - dpll: add reference-sync netlink attribute (Petr Oros) [RHEL-126530]
  - dpll: remove documentation of rclk_dev_name (Petr Oros) [RHEL-126530]
  - tpm: Prevent local DOS via tpm/tpm0/ppi/*operations (Denis Aleksandrov) [RHEL-62964]
  - KVM: arm64: vgic-v3: Release reserved slot outside of lpi_xa's lock (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-v3: Reinstate IRQ lock ordering for LPI xarray (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Update stale comment for sanitise_mte_tags() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Add build-time check for duplicate DECLARE_REG use (Cornelia Huck) [RHEL-115975]
  - kvm: arm64: use BUG() instead of BUG_ON(1) (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Fix page leak in user_mem_abort() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic: fix incorrect spinlock API usage (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-v3: Indicate vgic_put_irq() may take LPI xarray lock (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-v3: Don't require IRQs be disabled for LPI xarray lock (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-v3: Erase LPIs from xarray outside of raw spinlocks (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Spin off release helper from vgic_put_irq() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-v3: Use bare refcount for VGIC LPIs (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic: Drop stale comment on IRQ active state (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Initialize PMSCR_EL1 when in VHE (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Mark freed S2 MMUs as invalid (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the 32bit state (Cornelia Huck) [RHEL-115975]
  - arm64: vgic-v2: Fix guest endianness check in hVHE mode (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Disambiguate support for vSGIs v. vLPIs (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Enforce the sorting of the GICv3 system register table (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Clarify the check for reset callback in check_sysreg_table() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-its: Return -ENXIO to invalid KVM_DEV_ARM_VGIC_GRP_CTRL attrs (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Make RAS registers UNDEF when RAS isn't advertised (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Fix vcpu_{read,write}_sys_reg() accessors (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Simplify sysreg access on exception delivery (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: nv: Handle CNTHCTL_EL2 specially (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: nv: Add missing EL2->EL1 mappings in get_el2_to_el1_mapping() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Make RVBAR_EL2 accesses UNDEF (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Unify UNDEF injection helpers (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Make most GICv3 accesses UNDEF if they trap (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Fix enforcement of upper bound on MDCR_EL2.HPMN (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Don't retire MMIO instruction w/ pending (emulated) SError (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Treat vCPU with pending SError as runnable (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Block cacheable PFNMAP mapping (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Assume non-PFNMAP/MIXEDMAP VMAs can be mapped cacheable (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Rename the device variable to s2_force_noncacheable (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Remove kvm_arch_vcpu_run_map_fp() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Don't free hyp pages with pKVM on GICv2 (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Fix error path in init_hyp_mode() (Cornelia Huck) [RHEL-115975]
  - arm64: kvm: Introduce nvhe stack size constants (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Adjust range correctly during host stage-2 faults (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: WARN if unmapping a vLPI fails in any path (Cornelia Huck) [RHEL-115975]
  - can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124106] {CVE-2025-39925}
  - can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124106] {CVE-2025-39925}
  - futex: Optimize per-cpu reference counting (Waiman Long) [RHEL-101190]
  - futex: Don't leak robust_list pointer on exec race (Waiman Long) [RHEL-101190]
  - selftest/futex: Compile also with libnuma < 2.0.16 (Waiman Long) [RHEL-101190]
  - selftest/futex: Reintroduce "Memory out of range" numa_mpol's subtest (Waiman Long) [RHEL-101190]
  - selftest/futex: Make the error check more precise for futex_numa_mpol (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix futex_wait() for 32bit ARM (Waiman Long) [RHEL-101190]
  - selftests: futex: Fix incorrect kernel headers search path (Waiman Long) [RHEL-101190]
  - futex: Prevent use-after-free during requeue-PI (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix typos and grammar in futex_priv_hash (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix format-security warnings in futex_priv_hash (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix some futex_numa_mpol subtests (Waiman Long) [RHEL-101190]
  - selftests/futex: Remove the -g parameter from futex_priv_hash (Waiman Long) [RHEL-101190]
  - futex: Move futex_hash_free() back to __mmput() (Waiman Long) [RHEL-101190]
  - futex: Move futex cleanup to __mmdrop() (Waiman Long) [RHEL-101190]
  - kernel/fork: group allocation/free of per-cpu counters for mm struct (Waiman Long) [RHEL-101190]
  - futex: Use user_write_access_begin/_end() in futex_put_value() (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix spelling mistake "Succeffuly" -> "Successfully" (Waiman Long) [RHEL-101190]
  - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (Waiman Long) [RHEL-101190]
  - perf bench futex: Remove support for IMMUTABLE (Waiman Long) [RHEL-101190]
  - selftests/futex: Remove support for IMMUTABLE (Waiman Long) [RHEL-101190]
  - futex: Remove support for IMMUTABLE (Waiman Long) [RHEL-101190]
  - futex: Make futex_private_hash_get() static (Waiman Long) [RHEL-101190]
  - futex: Use RCU-based per-CPU reference counting instead of rcuref_t (Waiman Long) [RHEL-101190]
  - selftests/futex: Adapt the private hash test to RCU related changes (Waiman Long) [RHEL-101190]
  - perf bench futex: Fix prctl include in musl libc (Waiman Long) [RHEL-101190]
  - selftests/futex: Add futex_numa to .gitignore (Waiman Long) [RHEL-101190]
  - futex: Temporary disable FUTEX_PRIVATE_HASH (Waiman Long) [RHEL-101190]
  - futex: Initialize futex_phash_new during fork(). (Waiman Long) [RHEL-101190]
  - futex: Verify under the lock if hash can be replaced (Waiman Long) [RHEL-101190]
  - futex: Handle invalid node numbers supplied by user (Waiman Long) [RHEL-101190]
  - selftests/futex: Set the home_node in futex_numa_mpol (Waiman Long) [RHEL-101190]
  - selftests/futex: getopt() requires int as return value. (Waiman Long) [RHEL-101190]
  - tools headers UAPI: Sync linux/prctl.h with the kernel sources to pick FUTEX knob (Waiman Long) [RHEL-101190]
  - io_uring/futex: mark wait requests as inflight (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix spelling mistake "unitiliazed" -> "uninitialized" (Waiman Long) [RHEL-101190]
  - futex: Correct the kernedoc return value for futex_wait_setup(). (Waiman Long) [RHEL-101190]
  - tools headers: Synchronize prctl.h ABI header (Waiman Long) [RHEL-101190]
  - futex: Use RCU_INIT_POINTER() in futex_mm_init(). (Waiman Long) [RHEL-101190]
  - selftests/futex: Use TAP output in futex_numa_mpol (Waiman Long) [RHEL-101190]
  - selftests/futex: Use TAP output in futex_priv_hash (Waiman Long) [RHEL-101190]
  - futex: Fix kernel-doc comments (Waiman Long) [RHEL-101190]
  - futex: Relax the rcu_assign_pointer() assignment of mm->futex_phash in futex_mm_init() (Waiman Long) [RHEL-101190]
  - futex: Fix outdated comment in struct restart_block (Waiman Long) [RHEL-101190]
  - futex,selftests: Add another FUTEX2_NUMA selftest (Waiman Long) [RHEL-101190]
  - selftests/futex: Add futex_numa_mpol (Waiman Long) [RHEL-101190]
  - selftests/futex: Add futex_priv_hash (Waiman Long) [RHEL-101190]
  - selftests/futex: Build without headers nonsense (Waiman Long) [RHEL-101190]
  - tools/perf: Allow to select the number of hash buckets (Waiman Long) [RHEL-101190]
  - tools headers: Synchronize prctl.h ABI header (Waiman Long) [RHEL-101190]
  - futex: Implement FUTEX2_MPOL (Waiman Long) [RHEL-101190]
  - futex: Implement FUTEX2_NUMA (Waiman Long) [RHEL-101190]
  - futex: Allow to make the private hash immutable (Waiman Long) [RHEL-101190]
  - futex: Allow to resize the private local hash (Waiman Long) [RHEL-101190]
  - futex: Allow automatic allocation of process wide futex hash (Waiman Long) [RHEL-101190]
  - futex: Add basic infrastructure for local task local hash (Waiman Long) [RHEL-101190]
  - futex: Create helper function to initialize a hash slot (Waiman Long) [RHEL-101190]
  - futex: Introduce futex_q_lockptr_lock() (Waiman Long) [RHEL-101190]
  - futex: Decrease the waiter count before the unlock operation (Waiman Long) [RHEL-101190]
  - futex: Acquire a hash reference in futex_wait_multiple_setup() (Waiman Long) [RHEL-101190]
  - futex: Create private_hash() get/put class (Waiman Long) [RHEL-101190]
  - futex: Create futex_hash() get/put class (Waiman Long) [RHEL-101190]
  - futex: Create hb scopes (Waiman Long) [RHEL-101190]
  - futex: Pull futex_hash() out of futex_q_lock() (Waiman Long) [RHEL-101190]
  - futex: Move futex_queue() into futex_wait_setup() (Waiman Long) [RHEL-101190]
  - mm: Add vmalloc_huge_node() (Waiman Long) [RHEL-101190]
  - rcuref: Provide rcuref_is_dead() (Waiman Long) [RHEL-101190]
  - futex: Use a hashmask instead of hashsize (Waiman Long) [RHEL-101190]
  - rcuref: Plug slowpath race in rcuref_put() (Waiman Long) [RHEL-101190]
  - seqlock: add missing parameter documentation for raw_seqcount_try_begin() (Waiman Long) [RHEL-101190]
  - mm: introduce mmap_lock_speculate_{try_begin|retry} (Waiman Long) [RHEL-101190]
  - mm: convert mm_lock_seq to a proper seqcount (Waiman Long) [RHEL-101190]
  - seqlock: add raw_seqcount_try_begin (Waiman Long) [RHEL-101190]
  - sched/wake_q: Add helper to call wake_up_q after unlock with preemption disabled (Waiman Long) [RHEL-101190]
  - locking/rtmutex: Make sure we wake anything on the wake_q when we release the lock->wait_lock (Waiman Long) [RHEL-101190]
  - locking: rtmutex: Fix wake_q logic in task_blocks_on_rt_mutex (Waiman Long) [RHEL-101190]
  - futex: fix user access on powerpc (Waiman Long) [RHEL-101190]
  - futex: improve user space accesses (Waiman Long) [RHEL-101190]
  - locking/mutex: Make mutex::wait_lock irq safe (Waiman Long) [RHEL-101190]
  - locking/mutex: Remove wakeups from under mutex::wait_lock (Waiman Long) [RHEL-101190]
  - locking/rt: Annotate unlock followed by lock for sparse. (Waiman Long) [RHEL-101190]
  - mm: fix (harmless) type confusion in lock_vma_under_rcu() (Waiman Long) [RHEL-101190]
  - selftests/mm: kvm, mdwe fixes to avoid requiring "make headers" (Waiman Long) [RHEL-101190]
  - mm: optimize CONFIG_PER_VMA_LOCK member placement in vm_area_struct (Waiman Long) [RHEL-101190]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-646.el9]
changelog:
  - docs: powerpc: Add htm.rst to table of contents (Mamatha Inamdar) [RHEL-52755]
  - Add CONFIG_HTMDUMP (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add documentation for H_HTM debugfs interface (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm capabilities support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm flags support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm setup support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm info support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm status support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm start support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm configure support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm_hcall_wrapper to integrate other htm operations (Mamatha Inamdar) [RHEL-52755]
  - powerpc: Document details on H_HTM hcall (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries: Export hardware trace macro dump via debugfs (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries: Macros and wrapper functions for H_HTM call (Mamatha Inamdar) [RHEL-52755]
  - powerpc: Export kvm_guest static key, for bcachefs six locks (Mamatha Inamdar) [RHEL-52755]
  - kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129693]
  - USB: core: remove the move buf action (Desnes Nunes) [RHEL-122021]
  - usb: typec: tcpm: properly deliver cable vdms to altmode drivers (Desnes Nunes) [RHEL-122021]
  - xhci: fix memory leak regression when freeing xhci vdev devices depth first (Desnes Nunes) [RHEL-122021]
  - xhci: dbc: Fix full DbC transfer ring after several reconnects (Desnes Nunes) [RHEL-122021]
  - xhci: dbc: decouple endpoint allocation from initialization (Desnes Nunes) [RHEL-122021]
  - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions (Desnes Nunes) [RHEL-122021]
  - USB: serial: option: add Telit Cinterion FN990A w/audio compositions (Desnes Nunes) [RHEL-122021]
  - usb: xhci: Fix slot_id resource race conflict (Desnes Nunes) [RHEL-122021]
  - usb: typec: fusb302: Revert incorrect threaded irq fix (Desnes Nunes) [RHEL-122021]
  - USB: core: Update kerneldoc for usb_hcd_giveback_urb() (Desnes Nunes) [RHEL-122021]
  - memstick: Fix deadlock by moving removing flag earlier (Desnes Nunes) [RHEL-122021]
  - usb: dwc3: Remove WARN_ON for device endpoint command timeouts (Desnes Nunes) [RHEL-122021] {CVE-2025-39801}
  - USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles (Desnes Nunes) [RHEL-122021]
  - usb: storage: realtek_cr: Use correct byte order for bcs->Residue (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: imx: improve usbmisc_imx7d_pullup() (Desnes Nunes) [RHEL-122021]
  - kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq() (Desnes Nunes) [RHEL-122021]
  - usb: dwc3: Ignore late xferNotReady event to prevent halt timeout (Desnes Nunes) [RHEL-122021]
  - USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera (Desnes Nunes) [RHEL-122021]
  - usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test (Desnes Nunes) [RHEL-122021]
  - usb: renesas-xhci: Fix External ROM access timeouts (Desnes Nunes) [RHEL-122021]
  - usb: gadget: tegra-xudc: fix PM use count underflow (Desnes Nunes) [RHEL-122021]
  - usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive (Desnes Nunes) [RHEL-122021]
  - usb: dwc3: imx8mp: fix device leak at unbind (Desnes Nunes) [RHEL-122021]
  - usb: xhci: print xhci->xhc_state when queue_command failed (Desnes Nunes) [RHEL-122021]
  - usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() (Desnes Nunes) [RHEL-122021]
  - USB: serial: option: add Foxconn T99W709 (Desnes Nunes) [RHEL-122021]
  - usb: core: add urb->sgt parameter description (Desnes Nunes) [RHEL-122021]
  - thunderbolt: Fix copy+paste error in match_service_id() (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: Update power_supply on power role change (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (Desnes Nunes) [RHEL-122021]
  - usb: typec: fusb302: cache PD RX state (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: add DRM dependency (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: imx: Add a missing blank line (Desnes Nunes) [RHEL-122021]
  - usb: usblp: clean up assignment inside if conditions (Desnes Nunes) [RHEL-122021]
  - cdc-acm: fix race between initial clearing halt and open (Desnes Nunes) [RHEL-122021]
  - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (Desnes Nunes) [RHEL-122021]
  - usb: xhci: Avoid showing warnings for dying controller (Desnes Nunes) [RHEL-122021]
  - usb: xhci: Avoid showing errors during surprise removal (Desnes Nunes) [RHEL-122021]
  - misc: rtsx: usb: Ensure mmc child device is active when card is present (Desnes Nunes) [RHEL-122021]
  - media: uvcvideo: use usb_alloc_noncoherent/usb_free_noncoherent() (Desnes Nunes) [RHEL-122021]
  - usb: core: add dma-noncoherent buffer alloc and free API (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: s32g: Add usb support for s32g3 (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: s32g: Add usb support for s32g2 (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: Add compatible strings for s32g2/s32g3 (Desnes Nunes) [RHEL-122021]
  - usb: dwc3: gadget: Simplify TRB reclaim logic by removing redundant 'chain' argument (Desnes Nunes) [RHEL-122021]
  - usb: early: xhci-dbc: Fix early_ioremap leak (Desnes Nunes) [RHEL-122021]
  - net: thunderbolt: Enable end-to-end flow control also in transmit (Desnes Nunes) [RHEL-122021]
  - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (Desnes Nunes) [RHEL-122021]
  - usb: core: config: Prevent OOB read in SS endpoint companion parsing (Desnes Nunes) [RHEL-122021] {CVE-2025-39760}
  - usb: misc: onboard_usb_dev: Add Bison Electronics Inc. Integrated Camera (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: genesys,gl850g: add downstream facing ports (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: genesys,gl850g: use usb-hub.yaml (Desnes Nunes) [RHEL-122021]
  - dt-bindings: trivial-devices: add compatible string nxp,isp1301 from isp1301.txt (Desnes Nunes) [RHEL-122021]
  - dt-bindings: trivial-devices: add onnn,adt7462 (Desnes Nunes) [RHEL-122021]
  - media: dt-bindings: Add OV5642 (Desnes Nunes) [RHEL-122021]
  - misc: rtsx: Add support for RTS5264 Version B and optimize init flow (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: register DRM HPD bridge (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: handle USB / HPD messages to set port orientation (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: correct response for GET_CURRENT_CAM (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: fake AltModes for port 0 (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: remove extra AltModes for port 1 (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: remove duplicate AltModes (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: add recipient arg to update_altmodes() callback (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: fix error and remove paths (Desnes Nunes) [RHEL-122021]
  - usb: dwc2: follow compatible string change for Sophgo CV18XX/SG200X series SoC (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: dwc2: rename sophgo usb compatible string (Desnes Nunes) [RHEL-122021]
  - usb: dwc2: add support for Sophgo CV18XX/SG200X series SoC (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: dwc2: Add support for Sophgo CV18XX/SG200X series SoC (Desnes Nunes) [RHEL-122021]
  - usb: dwc2: support dwc2 IP for Amlogic A1 SoC family (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: dwc2: add support for Amlogic A1 SoC USB peripheral (Desnes Nunes) [RHEL-122021]
  - usb: dwc3: gadget: Remove duplicate check while setting xfer resource (Desnes Nunes) [RHEL-122021]
  - usb: ehci: replace scnprintf() with sysfs_emit() (Desnes Nunes) [RHEL-122021]
  - usb: core: Use sysfs_emit_at() when showing dynamic IDs (Desnes Nunes) [RHEL-122021]
  - usb: typec: altmodes/displayport: add irq_hpd to sysfs (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Fix clang -Wimplicit-fallthrough in sd_set_power_mode() (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Add 74 clocks in poweron flow (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Re-work the code in sd_set_power_mode() (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Convert sd_set_power_mode() into void (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Print debug-messages at power-on/off errors (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Use devm_mmc_alloc_host() helper (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_pci: Use devm_mmc_alloc_host() helper (Desnes Nunes) [RHEL-122021]
  - thunderbolt: Fix typos in documentation comments (Desnes Nunes) [RHEL-122021]
  - Documentation: treewide: Replace remaining spinics links with lore (Desnes Nunes) [RHEL-122021]
  - net: usb: enable the work after stop usbnet by ip down/up (Desnes Nunes) [RHEL-122021]
  - net: usbnet: Fix the wrong netif_carrier_on() call (Desnes Nunes) [RHEL-122021]
  - net: usb: Convert tasklet API to new bottom half workqueue mechanism (Desnes Nunes) [RHEL-122021]
  - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (Desnes Nunes) [RHEL-122021]
  - usbnet: optimize usbnet_bh() to reduce CPU load (Desnes Nunes) [RHEL-122021]
  - treewide: Switch/rename to timer_delete[_sync]() (Desnes Nunes) [RHEL-122021]
  - net: usb: usbnet: fix race in probe failure (Desnes Nunes) [RHEL-122021]
  - net: usbnet: Remove generic .ndo_get_stats64 (Desnes Nunes) [RHEL-122021]
  - net: usbnet: Leverage core stats allocator (Desnes Nunes) [RHEL-122021]
  - usbnet:fix NPE during rx_complete (Desnes Nunes) [RHEL-122021] {CVE-2025-22050}
  - usb: core: modify comments xhci_hc_driver has HCD_MEMORY just like ehci ohci (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: imx: implement workaround for ERR051725 (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: imx: add imx_usbmisc_pullup() hook (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: udc: add CI_HDRC_CONTROLLER_PULLUP_EVENT event (Desnes Nunes) [RHEL-122021]
  - usb: core: usb_submit_urb: downgrade type check (Desnes Nunes) [RHEL-122021]
  - usb: storage: reltek_cr: convert to use secs_to_jiffies (Desnes Nunes) [RHEL-122021]
  - usb: typec: Remove unused ucsi_cci_str (Desnes Nunes) [RHEL-122021]
  - usb: core: Remove unused usb_unlink_anchored_urbs (Desnes Nunes) [RHEL-122021]
  - usb: gadget: Remove unused usb_remove_config (Desnes Nunes) [RHEL-122021]
  - usb: gadget: config: Remove unused usb_gadget_config_buf (Desnes Nunes) [RHEL-122021]
  - usb: Reorganize kerneldoc parameter names (Desnes Nunes) [RHEL-122021]
  - usb: gadget: remove max support speed info in bind operation (Desnes Nunes) [RHEL-122021]
  - usb: gadget: composite: cleanup function config_ep_by_speed_and_alt() (Desnes Nunes) [RHEL-122021]
  - usb: gadget: add a inline function gether_bitrate() (Desnes Nunes) [RHEL-122021]
  - usb: gadget: use working speed to calcaulate network bitrate and qlen (Desnes Nunes) [RHEL-122021]
  - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Desnes Nunes) [RHEL-122021] {CVE-2023-52894}
  - usb: gadget: config: remove max speed check in usb_assign_descriptors() (Desnes Nunes) [RHEL-122021]
  - usb: phy: tegra: Remove unused functions (Desnes Nunes) [RHEL-122021]
  - usb: typec: fusb302: fix scheduling while atomic when using virtio-gpio (Desnes Nunes) [RHEL-122021]
  - usb: core: Add 0x prefix to quirks debug output (Desnes Nunes) [RHEL-122021]
  - Documentation: usb: gadget: Wrap remaining usage snippets in literal code block (Desnes Nunes) [RHEL-122021]
  - usb: gadget: configfs: Ignore trailing LF for user strings to cdev (Desnes Nunes) [RHEL-122021]
  - usb: gadget: configfs: Attach arbitrary strings to cdev (Desnes Nunes) [RHEL-122021]
  - usb: gadget: configfs: Fix set but not used variable warning (Desnes Nunes) [RHEL-122021]
  - usb: gadget: configfs: Support arbitrary string descriptors (Desnes Nunes) [RHEL-122021]
  - usb: gadget: configfs: Rename struct gadget_strings (Desnes Nunes) [RHEL-122021]
  - docs: usb: gadget: Reindent numbered list (Desnes Nunes) [RHEL-122021]
  - usb: gadget: composite: Use USB API functions rather than constants (Desnes Nunes) [RHEL-122021]
  - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (Desnes Nunes) [RHEL-122021]
  - dt-bindings: phy: Convert ti,keystone-usbphy to DT schema (Desnes Nunes) [RHEL-122021]
  - dt-bindings: phy: Convert hisilicon,hi6220-usb-phy to DT schema (Desnes Nunes) [RHEL-122021]
  - Documentation: ABI: Update WMI device paths in ABI docs (Desnes Nunes) [RHEL-122021]
  - ABI: sysfs-platform-intel-pmc: add blank lines to make it valid for ReST (Desnes Nunes) [RHEL-122021]
  - ABI: sysfs-platform-dell-privacy-wmi: correct ABI entries (Desnes Nunes) [RHEL-122021]
  - perf tools: Don't set attr.exclude_guest by default (Michael Petlan) [RHEL-118946]
  - mptcp: propagate shutdown to subflows when possible (Davide Caratti) [RHEL-115624]
  - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN (Davide Caratti) [RHEL-115624]
  - mptcp: disable add_addr retransmission when timeout is 0 (Davide Caratti) [RHEL-115624]
  - mptcp: remove duplicate sk_reset_timer call (Davide Caratti) [RHEL-115624]
  - mptcp: pm: kernel: flush: do not reset ADD_ADDR limit (Davide Caratti) [RHEL-115624]
  - mptcp: drop skb if MPTCP skb extension allocation fails (Davide Caratti) [RHEL-115624]
  - mptcp: make fallback action and fallback decision atomic (Davide Caratti) [RHEL-115624]
  - mptcp: safety check before fallback (Davide Caratti) [RHEL-115624]
  - mptcp: reset when MPTCP opts are dropped after join (Davide Caratti) [RHEL-115624]
  - mptcp: export mptcp_subflow_early_fallback() (Davide Caratti) [RHEL-115624]
  - iommufd/selftest: Fix ioctl return value in _test_cmd_trigger_vevents() (Jerry Snitselaar) [RHEL-114131]
  - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC (Jerry Snitselaar) [RHEL-114131]
  - ntb: Force physically contiguous allocation of rx ring buffers (Jerry Snitselaar) [RHEL-114131]
  - KVM: PPC: Enable CAP_SPAPR_TCE_VFIO on pSeries KVM guests (Jerry Snitselaar) [RHEL-114131]
  - dma-mapping: fix direction in dma_alloc direction traces (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Register iommufd mock devices with fwspec (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: debugfs: Fix legacy mode page table dump logic (Jerry Snitselaar) [RHEL-114131]
  - ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() (Jerry Snitselaar) [RHEL-114131]
  - gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU (Jerry Snitselaar) [RHEL-114131]
  - dma: kmsan: export kmsan_handle_dma() for modules (Jerry Snitselaar) [RHEL-114131]
  - software node: Prevent link creation failure from causing kobj reference count imbalance (Jerry Snitselaar) [RHEL-114131]
  - iommu/selftest: prevent use of uninitialized variable (Jerry Snitselaar) [RHEL-114131]
  - PCI: Fix driver_managed_dma check (Jerry Snitselaar) [RHEL-114131]
  - platform: Fix race condition during DMA configure at IOMMU probe time (Jerry Snitselaar) [RHEL-114131]
  - PCI: Run quirk_huawei_pcie_sva() before arm_smmu_probe_device() (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Update the fail_nth limit (Jerry Snitselaar) [RHEL-114131]
  - iommufd: WARN if an object is aborted with an elevated refcount (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Fix race during abort for file descriptors (Jerry Snitselaar) [RHEL-114131] {CVE-2025-39966}
  - iommufd: Fix refcounting race during mmap (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd/pgtbl: Fix possible race while increase page table level (Jerry Snitselaar) [RHEL-114131] {CVE-2025-39961}
  - iommu/amd: Fix alias device DTE setting (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Fix ivrs_base memleak in early_amd_iommu_init() (Jerry Snitselaar) [RHEL-114131]
  - dma-debug: don't enforce dma mapping check on noncoherent allocations (Jerry Snitselaar) [RHEL-114131]
  - dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Fix spelling errors in iommufd.rst (Jerry Snitselaar) [RHEL-114131]
  - iommufd: viommu: free memory allocated by kvcalloc() using kvfree() (Jerry Snitselaar) [RHEL-114131]
  - iommu/virtio: Make instance lookup robust (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Fix missing cpu_to_le64 at lvcmdq_err_map (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline (Jerry Snitselaar) [RHEL-114131] {CVE-2025-38676}
  - iommu/vt-d: Use pci_is_display() (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Replace vsmmu_size/type with get_viommu_size (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Do not bother impl_ops if IOMMU_VIOMMU_TYPE_ARM_SMMUV3 (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Rename some shortterm-related identifiers (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for vdevice tombstone (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Explicitly skip tests for inapplicable variant (Jerry Snitselaar) [RHEL-114131]
  - iommufd/vdevice: Remove struct device reference from struct vdevice (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Destroy vdevice on idevice destroy (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Add a pre_destroy() op for objects (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Add iommufd_object_tombstone_user() helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Roll back to use iommufd_object_alloc() for vdevice (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Test reserved regions near ULONG_MAX (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Prevent ALIGN() overflow (Jerry Snitselaar) [RHEL-114131] {CVE-2025-38688}
  - iommu/tegra241-cmdqv: import IOMMUFD module namespace (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Do not allow _iommufd_object_alloc_ucmd if abort op is set (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Add IOMMU_VEVENTQ_TYPE_TEGRA241_CMDQV support (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Add user-space use support (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Do not statically map LVCMDQs (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Simplify deinit flow in tegra241_cmdqv_remove_vintf() (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Use request_threaded_irq (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3-iommufd: Add hw_info to impl_ops (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3-iommufd: Add vsmmu_size/type and vsmmu_init impl ops (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Update hw_info coverage for an input data_type (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Allow an input data_type via iommu_hw_info (Jerry Snitselaar) [RHEL-114131]
  - iommu: Allow an input type in hw_info op (Jerry Snitselaar) [RHEL-114131]
  - Documentation: userspace-api: iommufd: Update HW QUEUE (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for the new mmap interface (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Add mmap interface (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for IOMMUFD_CMD_HW_QUEUE_ALLOC (Jerry Snitselaar) [RHEL-114131]
  - iommufd/driver: Add iommufd_hw_queue_depend/undepend() helpers (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Add IOMMUFD_CMD_HW_QUEUE_ALLOC ioctl (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Introduce IOMMUFD_OBJ_HW_QUEUE and its related struct (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Add driver-defined vDEVICE support (Jerry Snitselaar) [RHEL-114131]
  - iommufd/access: Bypass access->ops->unmap for internal use (Jerry Snitselaar) [RHEL-114131]
  - iommufd/access: Add internal APIs for HW queue to use (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for viommu data (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Support user_data in mock_viommu_alloc (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Allow driver-specific user data for a vIOMMU object (Jerry Snitselaar) [RHEL-114131]
  - iommu: Pass in a driver-level user data structure to viommu_init op (Jerry Snitselaar) [RHEL-114131]
  - iommu: Add iommu_copy_struct_to_user helper (Jerry Snitselaar) [RHEL-114131]
  - iommu: Use enum iommu_hw_info_type for type in hw_info op (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Explicitly define vdev->virt_id (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Correct virt_id kdoc at struct iommu_vdevice_alloc (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Apply the new iommufd_object_alloc_ucmd helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Introduce iommufd_object_alloc_ucmd helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Move _iommufd_object_alloc out of driver.c (Jerry Snitselaar) [RHEL-114131]
  - iommu: Deprecate viommu_alloc op (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Replace arm_vsmmu_alloc with arm_vsmmu_init (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Replace mock_viommu_alloc with mock_viommu_init (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Drop parent domain from mock_iommu_domain_nested (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Support get_viommu_size and viommu_init ops (Jerry Snitselaar) [RHEL-114131]
  - iommu: Introduce get_viommu_size and viommu_init ops (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Return EOPNOTSUPP for failures due to driver bugs (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Use enum iommu_veventq_type for type in struct iommufd_veventq (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Use enum iommu_viommu_type for type in struct iommufd_viommu (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Drop unused ictx in struct iommufd_vdevice (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Apply obvious cosmetic fixes (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu: disable PRR on SM8250 (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Revert vmaster in the error path (Jerry Snitselaar) [RHEL-114131]
  - iommu/io-pgtable-arm: Remove unused macro iopte_prot (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (Jerry Snitselaar) [RHEL-114131] {CVE-2025-39739}
  - iommu/amd: Fix geometry.aperture_end for V2 tables (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Wrap debugfs ABI testing symbols snippets in literal code blocks (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add documentation for AMD IOMMU debugfs support (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add debugfs support to dump IRT Table (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add debugfs support to dump device table (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add support for device id user input (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add debugfs support to dump IOMMU command buffer (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add debugfs support to dump IOMMU Capability registers (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add debugfs support to dump IOMMU MMIO registers (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Refactor AMD IOMMU debugfs initial setup (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Enable PASID and ATS capabilities in the correct order (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add efr[HATS] max v1 page table level (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add HATDis feature support (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (Jerry Snitselaar) [RHEL-114131] {CVE-2025-38594}
  - iommu/vt-d: Make iotlb_sync_map a static property of dmar_domain (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Split paging_domain_compatible() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Split intel_iommu_enforce_cache_coherency() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Create unique domain ops for each stage (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Split intel_iommu_domain_alloc_paging_flags() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Do not wipe out the page table NID when devices detach (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Fold domain_exit() into intel_iommu_domain_free() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Lift the __pa to domain_setup_first_level/intel_svm_set_dev_pasid() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Remove the CONFIG_X86 wrapping from iommu init hook (Jerry Snitselaar) [RHEL-114131]
  - iommu: Remove ops->pgsize_bitmap (Jerry Snitselaar) [RHEL-114131]
  - iommu: Remove iommu_ops pgsize_bitmap from simple drivers (Jerry Snitselaar) [RHEL-114131]
  - iommu: Remove ops.pgsize_bitmap from drivers that don't use it (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu: Remove iommu_ops pgsize_bitmap (Jerry Snitselaar) [RHEL-114131]
  - qiommu/arm-smmu-v3: Remove iommu_ops pgsize_bitmap (Jerry Snitselaar) [RHEL-114131]
  - dma-contiguous: hornor the cma address limit setup by user (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Assign devtlb cache tag on ATS enablement (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Fix build warnings due to uninitialized mfd (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add missing close(mfd) in memfd_mmap() (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add asserts testing global mfd (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra: Fix incorrect size calculation (Jerry Snitselaar) [RHEL-114131]
  - scatterlist: fix extraneous '@'-sign kernel-doc notation (Jerry Snitselaar) [RHEL-114131]
  - Revert "iommu/amd: Prevent binding other PCI drivers to IOMMU PCI devices" (Jerry Snitselaar) [RHEL-114131]
  - scatterlist: inline sg_next() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Clear the freelist after iommu_put_pages_list() (Jerry Snitselaar) [RHEL-114131]
  - iommu: make inclusion of amd directory conditional (Jerry Snitselaar) [RHEL-114131]
  - iommu: make inclusion of intel directory conditional (Jerry Snitselaar) [RHEL-114131]
  - iommu: remove duplicate selection of DMAR_TABLE (Jerry Snitselaar) [RHEL-114131]
  - iommu: Cleanup comments for dev_enable/disable_feat (Jerry Snitselaar) [RHEL-114131]
  - iommu: Protect against overflow in iommu_pgsize() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Handle yet another race around registration (Jerry Snitselaar) [RHEL-114131]
  - iommu: Allow attaching static domains in iommu_attach_device_pasid() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Hide ops.domain_alloc behind CONFIG_FSL_PAMU (Jerry Snitselaar) [RHEL-114131]
  - iommu: Do not call domain_alloc() in iommu_sva_domain_alloc() (Jerry Snitselaar) [RHEL-114131]
  - iommu/virtio: Move to domain_alloc_paging() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Add domain_alloc_identity() (Jerry Snitselaar) [RHEL-114131]
  - iommu/virtio: Break out bypass identity support into a global static (Jerry Snitselaar) [RHEL-114131]
  - iommu: Remove iommu_dev_enable/disable_feature() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Remove unnecessary IOMMU_DEV_FEAT_IOPF (Jerry Snitselaar) [RHEL-114131]
  - dmaengine: idxd: Remove unnecessary IOMMU_DEV_FEAT_IOPF (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Put iopf enablement in domain attach path (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Put iopf enablement in domain attach path (Jerry Snitselaar) [RHEL-114131]
  - iommu: Remove IOMMU_DEV_FEAT_SVA (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Put iopf enablement in the domain attach path (Jerry Snitselaar) [RHEL-114131]
  - iommu: Avoid introducing more races (Jerry Snitselaar) [RHEL-114131]
  - iommu/vtd: Remove iommu_alloc_pages_node() (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Use iommu_alloc_pages_node_sz() for the IRT (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove iommu_alloc_page_node() (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove iommu_alloc_page/pages() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Update various drivers to pass in lg2sz instead of order to iommu pages (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Use roundup_pow_two() instead of get_order() (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Change rlookup, irq_lookup, and alias to use kvalloc() (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Allow sub page sizes to be passed into the allocator (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Move the __GFP_HIGHMEM checks into the common code (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Move from struct page to struct ioptdesc and folio (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove iommu_put_pages_list_old and the _Generic (Jerry Snitselaar) [RHEL-114131]
  - iommu: Change iommu_iotlb_gather to use iommu_page_list (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Convert to use struct iommu_pages_list (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Formalize the freelist API (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: De-inline the substantial functions (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove iommu_free_page() (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove the order argument to iommu_free_pages() (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Make iommu_put_pages_list() work with high order allocations (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove __iommu_alloc_pages()/__iommu_free_pages() (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra: Do not use struct page as the handle for pts (Jerry Snitselaar) [RHEL-114131]
  - iommu/terga: Do not use struct page as the handle for as->pd memory (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Allow matching ACPI HID devices without matching UIDs (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add support for HTRangeIgnore feature (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Ensure GA log notifier callbacks finish running before module unload (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Restore context entry setup order for aliased devices (Jerry Snitselaar) [RHEL-114131] {CVE-2025-38216}
  - iommu/vt-d: Change dmar_ats_supported() to return boolean (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Eliminate pci_physfn() in dmar_find_matched_satc_unit() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Replace spin_lock with mutex to protect domain ida (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Use ida to manage domain id (Jerry Snitselaar) [RHEL-114131]
  - ida: Add ida_find_first_range() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Restore WO permissions on second-level paging entries (Jerry Snitselaar) [RHEL-114131]
  - iommu: ipmmu-vmsa: avoid Wformat-security warning (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-qcom: Add SAR2130P MDSS compatible (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-qcom: Make set_stall work when the device is on (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu: Move handing of RESUME to the context fault handler (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-qcom: Enable threaded IRQ for Adreno SMMUv2/MMU500 (Jerry Snitselaar) [RHEL-114131]
  - iommu/io-pgtable-arm: Add quirk to quiet WARN_ON() (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Fix incorrect return in arm_smmu_attach_dev (Jerry Snitselaar) [RHEL-114131]
  - iommu: Skip PASID validation for devices without PASID capability (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Revert ATS timing change to fix boot failure (Jerry Snitselaar) [RHEL-114131]
  - iommu: Fix two issues in iommu_copy_struct_from_user() (Jerry Snitselaar) [RHEL-114131] {CVE-2025-37900}
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Jerry Snitselaar) [RHEL-114131] {CVE-2025-37927}
  - iommu/arm-smmu-v3: Fail aliasing StreamIDs more gracefully (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Add missing S2FWB feature detection (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: WARN if KVM attempts to set vCPU affinity without posted intrrupts (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Jerry Snitselaar) [RHEL-114131]
  - dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask (Jerry Snitselaar) [RHEL-114131]
  - dma-mapping: Fix warning reported for missing prototype (Jerry Snitselaar) [RHEL-114131]
  - dma-mapping: avoid potential unused data compilation warning (Jerry Snitselaar) [RHEL-114131]
  - dma/contiguous: avoid warning about unused size_bytes (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (Jerry Snitselaar) [RHEL-114131] {CVE-2025-37837}
  - iommu: remove unneeded semicolon (Jerry Snitselaar) [RHEL-114131]
  - iommu/ipmmu-vmsa: Register in a sensible order (Jerry Snitselaar) [RHEL-114131]
  - iommu: Clear iommu-dma ops on cleanup (Jerry Snitselaar) [RHEL-114131] {CVE-2025-37877}
  - iommu/vt-d: Remove an unnecessary call set_dma_ops() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Fix crash in report_iommu_fault() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Test attach before detaching pasid (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Fix iommu_vevent_header tables markup (Jerry Snitselaar) [RHEL-114131]
  - iommu: Convert unreachable() to BUG() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Balance veventq->num_events inc/dec (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Initialize the flags of vevent in iommufd_viommu_report_event() (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for iommufd pasid attach/detach (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add test ops to test pasid attach/detach (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add a helper to get test device (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add set_dev_pasid in mock iommu (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Allow allocating PASID-compatible domain (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Add IOMMU_HWPT_ALLOC_PASID support (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Enforce PASID-compatible domain for RID (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Support pasid attach/replace (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Enforce PASID-compatible domain in PASID path (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Add pasid_attach array to track per-PASID attach (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Replace device_list with device_array (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Wrap igroup->hwpt and igroup->device_list into attach struct (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Add helper to detect the first attach of a group (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Replace idev->igroup with local variable (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Only add reserved_iova in non-pasid path (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Pass @pasid through the device attach/replace path (Jerry Snitselaar) [RHEL-114131]
  - iommu: Introduce a replace API for device pasid (Jerry Snitselaar) [RHEL-114131]
  - iommu: Require passing new handles to APIs supporting handle (Jerry Snitselaar) [RHEL-114131]
  - iommu: Drop sw_msi from iommu_domain (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Move iommufd_sw_msi and related functions to driver.c (Jerry Snitselaar) [RHEL-114131]
  - iommu: Sort out domain user data (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Set MEV bit in nested STE for DoS mitigations (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Report events that belong to devices attached to vIOMMU (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_vmaster (Jerry Snitselaar) [RHEL-114131]
  - Documentation: userspace-api: iommufd: Update FAULT and VEVENTQ (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add IOMMU_VEVENTQ_ALLOC test coverage (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add IOMMU_TEST_OP_TRIGGER_VEVENT for vEVENTQ coverage (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Require vdev_id when attaching to a nested domain (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Add iommufd_viommu_report_event helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Add iommufd_viommu_get_vdev_id helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Add IOMMUFD_OBJ_VEVENTQ and IOMMUFD_CMD_VEVENTQ_ALLOC (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Rename fault.c to eventq.c (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Abstract an iommufd_eventq from iommufd_fault (Jerry Snitselaar) [RHEL-114131]
  - iommufd/fault: Add an iommufd_fault_init() helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd/fault: Move two fault functions out of the header (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Fail replace if device has not been attached (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Set domain->iommufd_hwpt in all hwpt->domain allocators (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Fix uninitialized rc in iommufd_access_rw() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Disallow allocating nested parent domain with fault ID (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Consolidate protection domain free code (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Remove unused forward declaration (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Remove outdated comment (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd/pgtbl_v2: Improve error handling (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Remove unused variable (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Log IOMMU control register in event log path (Jerry Snitselaar) [RHEL-114131]
  - lib/scatterlist: Add SG_MITER_LOCAL and use it (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Cleanup intel_context_flush_present() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Move PRI enablement in probe path (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Move scalable mode ATS enablement to probe path (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Check if SVA is supported when attaching the SVA domain (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Use virt_to_phys() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Fix system hang on reboot -f (Jerry Snitselaar) [RHEL-114131]
  - iommu: Don't warn prematurely about dodgy probes (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu: Set rpm auto_suspend once during probe (Jerry Snitselaar) [RHEL-114131]
  - iommu: Get DT/ACPI parsing into the proper probe path (Jerry Snitselaar) [RHEL-114131]
  - iommu: Keep dev->iommu state consistent (Jerry Snitselaar) [RHEL-114131]
  - iommu: Resolve ops in iommu_init_device() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Handle race with default domain setup (Jerry Snitselaar) [RHEL-114131]
  - iommu: Unexport iommu_fwspec_free() (Jerry Snitselaar) [RHEL-114131]
  - iommu/dma: Remove redundant locking (Jerry Snitselaar) [RHEL-114131]
  - iommu: Swap the order of setting group->pasid_array and calling attach op of iommu drivers (Jerry Snitselaar) [RHEL-114131]
  - iommu: Store either domain or handle in group->pasid_array (Jerry Snitselaar) [RHEL-114131]
  - iommu: Drop iommu_group_replace_domain() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Make @handle mandatory in iommu_{attach|replace}_group_handle() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Implement sw_msi support natively (Jerry Snitselaar) [RHEL-114131]
  - iommu: Turn fault_data to iommufd private pointer (Jerry Snitselaar) [RHEL-114131]
  - irqchip: Have CONFIG_IRQ_MSI_IOMMU be selected by irqchips that need it (Jerry Snitselaar) [RHEL-114131]
  - iommu: Make iommu_dma_prepare_msi() into a generic operation (Jerry Snitselaar) [RHEL-114131]
  - genirq/msi: Refactor iommu_dma_compose_msi_msg() (Jerry Snitselaar) [RHEL-114131]
  - genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (Jerry Snitselaar) [RHEL-114131] {CVE-2025-38062}
  - iommufd/fault: Remove iommufd_fault_domain_attach/detach/replace_dev() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Make attach_handle generic than fault specific (Jerry Snitselaar) [RHEL-114131]
  - dma: Introduce generic dma_addr_*crypted helpers (Jerry Snitselaar) [RHEL-114131]
  - dma: Fix encryption bit clearing for dma_to_phys (Jerry Snitselaar) [RHEL-114131]
  - treewide, timers: Rename from_timer() to timer_container_of() (Ivan Vecera) [RHEL-115039]
  - xfs: remove unused trace event xfs_dqreclaim_dirty (Carlos Maiolino) [RHEL-112145]
  - xfs: fix scrub trace with null pointer in quotacheck (Carlos Maiolino) [RHEL-112145]
  - xfs: fix unmount hang with unflushable inodes stuck in the AIL (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out stale buffer item completion (Carlos Maiolino) [RHEL-112145]
  - xfs: rearrange code in xfs_buf_item.c (Carlos Maiolino) [RHEL-112145]
  - xfs: add tracepoints for stale pinned inode state debug (Carlos Maiolino) [RHEL-112145]
  - xfs: avoid dquot buffer pin deadlock (Carlos Maiolino) [RHEL-112145]
  - xfs: catch stale AGF/AGF metadata (Carlos Maiolino) [RHEL-112145]
  - xfs: xfs_ifree_cluster vs xfs_iflush_shutdown_abort deadlock (Carlos Maiolino) [RHEL-112145]
  - xfs: don't assume perags are initialised when trimming AGs (Carlos Maiolino) [RHEL-88450]
  - xfs: unmapped buffer item size straddling mismatch (Carlos Maiolino) [RHEL-112145]
  - xfs: don't increment m_generation for all errors in xfs_growfs_data (Carlos Maiolino) [RHEL-112145]
  - xfs: flush inodegc before swapon (Carlos Maiolino) [RHEL-112145]
  - xfs: Do not allow norecovery mount with quotacheck (Carlos Maiolino) [RHEL-112145]
  - xfs: remove xfs_buf_cache.bc_lock (Carlos Maiolino) [RHEL-112145]
  - xfs: Add error handling for xfs_reflink_cancel_cow_range (Carlos Maiolino) [RHEL-112145]
  - xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (Carlos Maiolino) [RHEL-112145]
  - xfs: remove an out of data comment in _xfs_buf_alloc (Carlos Maiolino) [RHEL-112145]
  - xfs: fix buffer lookup vs release race (Carlos Maiolino) [RHEL-112145]
  - xfs: check for dead buffers in xfs_buf_find_insert (Carlos Maiolino) [RHEL-112145]
  - xfs: don't shut down the filesystem for media failures beyond end of log (Carlos Maiolino) [RHEL-112145]
  - xfs: release the dquot buf outside of qli_lock (Carlos Maiolino) [RHEL-112145]
  - xfs: don't over-report free space or inodes in statvfs (Carlos Maiolino) [RHEL-112145]
  - xfs: lock dquot buffer before detaching dquot from b_li_list (Carlos Maiolino) [RHEL-112145]
  - xfs: don't return an error from xfs_update_last_rtgroup_size for !XFS_RT (Carlos Maiolino) [RHEL-112145]
  - xfs: return from xfs_symlink_verify early on V4 filesystems (Carlos Maiolino) [RHEL-112145]
  - xfs: fix zero byte checking in the superblock scrubber (Carlos Maiolino) [RHEL-112145]
  - xfs: check pre-metadir fields correctly (Carlos Maiolino) [RHEL-112145]
  - xfs: don't crash on corrupt /quotas dirent (Carlos Maiolino) [RHEL-112145]
  - xfs: don't move nondir/nonreg temporary repair files to the metadir namespace (Carlos Maiolino) [RHEL-112145]
  - xfs: fix sb_spino_align checks for large fsblock sizes (Carlos Maiolino) [RHEL-112145]
  - xfs: convert quotacheck to attach dquot buffers (Carlos Maiolino) [RHEL-112145]
  - xfs: attach dquot buffer to dquot log item buffer (Carlos Maiolino) [RHEL-112145]
  - xfs: clean up log item accesses in xfs_qm_dqflush{,_done} (Carlos Maiolino) [RHEL-112145]
  - xfs: separate dquot buffer reads from xfs_dqflush (Carlos Maiolino) [RHEL-112145]
  - xfs: don't lose solo dquot update transactions (Carlos Maiolino) [RHEL-112145]
  - xfs: don't lose solo superblock counter update transactions (Carlos Maiolino) [RHEL-112145]
  - xfs: avoid nested calls to __xfs_trans_commit (Carlos Maiolino) [RHEL-112145]
  - xfs: only run precommits once per transaction object (Carlos Maiolino) [RHEL-112145]
  - xfs: update btree keys correctly when _insrec splits an inode root block (Carlos Maiolino) [RHEL-112145]
  - xfs: fix error bailout in xfs_rtginode_create (Carlos Maiolino) [RHEL-112145]
  - xfs: mark metadir repair tempfiles with IRECOVERY (Carlos Maiolino) [RHEL-112145]
  - xfs: separate healthy clearing mask during repair (Carlos Maiolino) [RHEL-112145]
  - xfs: don't drop errno values when we fail to ficlone the entire range (Carlos Maiolino) [RHEL-112145]
  - xfs: return a 64-bit block count from xfs_btree_count_blocks (Carlos Maiolino) [RHEL-112145]
  - xfs: keep quota directory inode loaded (Carlos Maiolino) [RHEL-112145]
  - xfs: metapath scrubber should use the already loaded inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: don't call xfs_bmap_same_rtgroup in xfs_bmap_add_extent_hole_delay (Carlos Maiolino) [RHEL-112145]
  - xfs: Use xchg() in xlog_cil_insert_pcp_aggregate() (Carlos Maiolino) [RHEL-112145]
  - xfs: prevent mount and log shutdown race (Carlos Maiolino) [RHEL-112145]
  - xfs: delalloc and quota softlimit timers are incoherent (Carlos Maiolino) [RHEL-112145]
  - xfs: remove unknown compat feature check in superblock write validation (Carlos Maiolino) [RHEL-112145]
  - xfs: port ondisk structure checks from xfs/122 to the kernel (Carlos Maiolino) [RHEL-112145]
  - xfs: separate space btree structures in xfs_ondisk.h (Carlos Maiolino) [RHEL-112145]
  - xfs: convert struct typedefs in xfs_ondisk.h (Carlos Maiolino) [RHEL-112145]
  - xfs: update sb field checks when metadir is turned on (Carlos Maiolino) [RHEL-112145]
  - xfs: enable realtime quota again (Carlos Maiolino) [RHEL-112145]
  - xfs: reserve quota for realtime files correctly (Carlos Maiolino) [RHEL-112145]
  - xfs: create quota preallocation watermarks for realtime quota (Carlos Maiolino) [RHEL-112145]
  - xfs: report realtime block quota limits on realtime directories (Carlos Maiolino) [RHEL-112145]
  - xfs: advertise realtime quota support in the xqm stat files (Carlos Maiolino) [RHEL-112145]
  - xfs: fix chown with rt quota (Carlos Maiolino) [RHEL-112145]
  - xfs: persist quota flags with metadir (Carlos Maiolino) [RHEL-112145]
  - xfs: scrub quota file metapaths (Carlos Maiolino) [RHEL-112145]
  - xfs: use metadir for quota inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: refactor xfs_qm_destroy_quotainos (Carlos Maiolino) [RHEL-112145]
  - xfs: free xfs_busy_extents structure when no RT extents are queued (Carlos Maiolino) [RHEL-112145]
  - xfs: use rtgroup busy extent list for FITRIM (Carlos Maiolino) [RHEL-112145]
  - xfs: implement busy extent tracking for rtgroups (Carlos Maiolino) [RHEL-112145]
  - xfs: port the perag discard code to handle generic groups (Carlos Maiolino) [RHEL-112145]
  - xfs: move the min and max group block numbers to xfs_group (Carlos Maiolino) [RHEL-112145]
  - xfs: adjust min_block usage in xfs_verify_agbno (Carlos Maiolino) [RHEL-112145]
  - xfs: make xfs_rtblock_t a segmented address like xfs_fsblock_t (Carlos Maiolino) [RHEL-112145]
  - xfs: create helpers to deal with rounding xfs_filblks_t to rtx boundaries (Carlos Maiolino) [RHEL-112145]
  - xfs: create helpers to deal with rounding xfs_fileoff_t to rtx boundaries (Carlos Maiolino) [RHEL-112145]
  - xfs: mask off the rtbitmap and summary inodes when metadir in use (Carlos Maiolino) [RHEL-112145]
  - xfs: scrub metadir paths for rtgroup metadata (Carlos Maiolino) [RHEL-112145]
  - xfs: repair realtime group superblock (Carlos Maiolino) [RHEL-112145]
  - xfs: scrub the realtime group superblock (Carlos Maiolino) [RHEL-112145]
  - xfs: don't coalesce file mappings that cross rtgroup boundaries in scrub (Carlos Maiolino) [RHEL-112145]
  - xfs: make the RT allocator rtgroup aware (Carlos Maiolino) [RHEL-112145]
  - xfs: don't merge ioends across RTGs (Carlos Maiolino) [RHEL-112145]
  - xfs: use realtime EFI to free extents when rtgroups are enabled (Carlos Maiolino) [RHEL-112145]
  - xfs: support error injection when freeing rt extents (Carlos Maiolino) [RHEL-112145]
  - xfs: support logging EFIs for realtime extents (Carlos Maiolino) [RHEL-112145]
  - xfs: force swapext to a realtime file to use the file content exchange ioctl (Carlos Maiolino) [RHEL-112145]
  - xfs: store rtgroup information with a bmap intent (Carlos Maiolino) [RHEL-112145]
  - xfs: grow the realtime section when realtime groups are enabled (Carlos Maiolino) [RHEL-112145]
  - xfs: encode the rtsummary in big endian format (Carlos Maiolino) [RHEL-112145]
  - xfs: encode the rtbitmap in big endian format (Carlos Maiolino) [RHEL-112145]
  - xfs: add block headers to realtime bitmap and summary blocks (Carlos Maiolino) [RHEL-112145]
  - xfs: export the geometry of realtime groups to userspace (Carlos Maiolino) [RHEL-112145]
  - xfs: record rt group metadata errors in the health system (Carlos Maiolino) [RHEL-112145]
  - xfs: convert sick_map loops to use ARRAY_SIZE (Carlos Maiolino) [RHEL-112145]
  - xfs: add frextents to the lazysbcounters when rtgroups enabled (Carlos Maiolino) [RHEL-112145]
  - xfs: add a helper to prevent bmap merges across rtgroup boundaries (Carlos Maiolino) [RHEL-112145]
  - xfs: check that rtblock extents do not break rtsupers or rtgroups (Carlos Maiolino) [RHEL-112145]
  - xfs: export realtime group geometry via XFS_FSOP_GEOM (Carlos Maiolino) [RHEL-112145]
  - xfs: update realtime super every time we update the primary fs super (Carlos Maiolino) [RHEL-112145]
  - xfs: check the realtime superblock at mount time (Carlos Maiolino) [RHEL-112145]
  - xfs: define the format of rt groups (Carlos Maiolino) [RHEL-112145]
  - iomap: add a merge boundary flag (Carlos Maiolino) [RHEL-112145]
  - xfs: fix rt device offset calculations for FITRIM (Carlos Maiolino) [RHEL-112145]
  - xfs: make RT extent numbers relative to the rtgroup (Carlos Maiolino) [RHEL-112145]
  - xfs: refactor xfs_rtsummary_blockcount (Carlos Maiolino) [RHEL-112145]
  - xfs: refactor xfs_rtbitmap_blockcount (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out a xfs_growfs_check_rtgeom helper (Carlos Maiolino) [RHEL-112145]
  - xfs: use xfs_growfs_rt_alloc_fake_mount in xfs_growfs_rt_alloc_blocks (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out a xfs_growfs_rt_alloc_fake_mount helper (Carlos Maiolino) [RHEL-112145]
  - xfs: calculate RT bitmap and summary blocks based on sb_rextents (Carlos Maiolino) [RHEL-112145]
  - xfs: remove XFS_ILOCK_RT* (Carlos Maiolino) [RHEL-112145]
  - xfs: support creating per-RTG files in growfs (Carlos Maiolino) [RHEL-112145]
  - xfs: move RT bitmap and summary information to the rtgroup (Carlos Maiolino) [RHEL-112145]
  - xfs: split xfs_trim_rtdev_extents (Carlos Maiolino) [RHEL-112145]
  - xfs: cleanup xfs_getfsmap_rtdev_rtbitmap (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out a xfs_growfs_rt_alloc_blocks helper (Carlos Maiolino) [RHEL-112145]
  - xfs: add a xfs_qm_unmount_rt helper (Carlos Maiolino) [RHEL-112145]
  - xfs: add a xfs_bmap_free_rtblocks helper (Carlos Maiolino) [RHEL-112145]
  - xfs: add rtgroup-based realtime scrubbing context management (Carlos Maiolino) [RHEL-112145]
  - xfs: support caching rtgroup metadata inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: add a lockdep class key for rtgroup inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: define locking primitives for realtime groups (Carlos Maiolino) [RHEL-112145]
  - xfs: create incore realtime group structures (Carlos Maiolino) [RHEL-112145]
  - xfs: clean up xfs_getfsmap_helper arguments (Carlos Maiolino) [RHEL-112145]
  - xfs: repair metadata directory file path connectivity (Carlos Maiolino) [RHEL-112145]
  - xfs: confirm dotdot target before replacing it during a repair (Carlos Maiolino) [RHEL-112145]
  - xfs: check metadata directory file path connectivity (Carlos Maiolino) [RHEL-112145]
  - xfs: move repair temporary files to the metadata directory tree (Carlos Maiolino) [RHEL-112145]
  - xfs: check the metadata directory inumber in superblocks (Carlos Maiolino) [RHEL-112145]
  - xfs: scrub metadata directories (Carlos Maiolino) [RHEL-112145]
  - xfs: fix di_metatype field of inodes that won't load (Carlos Maiolino) [RHEL-112145]
  - xfs: adjust parent pointer scrubber for sb-rooted metadata files (Carlos Maiolino) [RHEL-112145]
  - xfs: metadata files can have xattrs if metadir is enabled (Carlos Maiolino) [RHEL-112145]
  - xfs: do not count metadata directory files when doing online quotacheck (Carlos Maiolino) [RHEL-112145]
  - xfs: refactor directory tree root predicates (Carlos Maiolino) [RHEL-112145]
  - xfs: record health problems with the metadata directory (Carlos Maiolino) [RHEL-112145]
  - xfs: adjust xfs_bmap_add_attrfork for metadir (Carlos Maiolino) [RHEL-112145]
  - xfs: mark quota inodes as metadata files (Carlos Maiolino) [RHEL-112145]
  - xfs: don't count metadata directory files to quota (Carlos Maiolino) [RHEL-112145]
  - xfs: allow bulkstat to return metadata directories (Carlos Maiolino) [RHEL-112145]
  - xfs: advertise metadata directory feature (Carlos Maiolino) [RHEL-112145]
  - xfs: hide metadata inodes from everyone because they are special (Carlos Maiolino) [RHEL-112145]
  - xfs: disable the agi rotor for metadata inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: read and write metadata inode directory tree (Carlos Maiolino) [RHEL-112145]
  - xfs: enforce metadata inode flag (Carlos Maiolino) [RHEL-112145]
  - xfs: load metadata directory root at mount time (Carlos Maiolino) [RHEL-112145]
  - xfs: iget for metadata inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: define the on-disk format for the metadir feature (Carlos Maiolino) [RHEL-112145]
  - xfs: standardize EXPERIMENTAL warning generation (Carlos Maiolino) [RHEL-112145]
  - xfs: rename metadata inode predicates (Carlos Maiolino) [RHEL-112145]
  - xfs: constify the xfs_inode predicates (Carlos Maiolino) [RHEL-112145]
  - xfs: constify the xfs_sb predicates (Carlos Maiolino) [RHEL-112145]
  - xfs: store a generic group structure in the intents (Carlos Maiolino) [RHEL-112145]
  - xfs: remove xfs_group_intent_hold and xfs_group_intent_rele (Carlos Maiolino) [RHEL-112145]
  - xfs: add group based bno conversion helpers (Carlos Maiolino) [RHEL-112145]
  - xfs: store a generic xfs_group pointer in xfs_getfsmap_info (Carlos Maiolino) [RHEL-112145]
  - xfs: add a generic group pointer to the btree cursor (Carlos Maiolino) [RHEL-112145]
  - xfs: convert busy extent tracking to the generic group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: convert extent busy tracepoints to the generic group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: return the busy generation from xfs_extent_busy_list_empty (Carlos Maiolino) [RHEL-112145]
  - xfs: move the online repair rmap hooks to the generic group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: move draining of deferred operations to the generic group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: mark xfs_perag_intent_{hold,rele} static (Carlos Maiolino) [RHEL-112145]
  - xfs: move metadata health tracking to the generic group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: switch perag iteration from the for_each macros to a while based iterator (Carlos Maiolino) [RHEL-112145]
  - xfs: add a xfs_group_next_range helper (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out a generic xfs_group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out a xfs_iwalk_args helper (Carlos Maiolino) [RHEL-112145]
  - xfs: insert the pag structures into the xarray later (Carlos Maiolino) [RHEL-112145]
  - xfs: split xfs_initialize_perag (Carlos Maiolino) [RHEL-112145]
  - xfs: convert remaining trace points to pass pag structures (Carlos Maiolino) [RHEL-112145]
  - xfs: pass the pag to the xrep_newbt_extent_class tracepoints (Carlos Maiolino) [RHEL-112145]
  - xfs: pass the pag to the trace_xrep_calc_ag_resblks{,_btsize} trace points (Carlos Maiolino) [RHEL-112145]
  - xfs: pass objects to the xrep_ibt_walk_rmap tracepoint (Carlos Maiolino) [RHEL-112145]
  - xfs: pass the iunlink item to the xfs_iunlink_update_dinode trace point (Carlos Maiolino) [RHEL-112145]
  - xfs: pass objects to the xfs_irec_merge_{pre,post} trace points (Carlos Maiolino) [RHEL-112145]
  - xfs: pass a perag structure to the xfs_ag_resv_init_error trace point (Carlos Maiolino) [RHEL-112145]
  - xfs: constify pag arguments to trace points (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the unused xrep_bmap_walk_rmap trace point (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the unused trace_xfs_iwalk_ag trace point (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the mount field from struct xfs_busy_extents (Carlos Maiolino) [RHEL-112145]
  - xfs: keep a reference to the pag for busy extents (Carlos Maiolino) [RHEL-112145]
  - xfs: pass a pag to xfs_extent_busy_{search,reuse} (Carlos Maiolino) [RHEL-112145]
  - xfs: add a xfs_agino_to_ino helper (Carlos Maiolino) [RHEL-112145]
  - xfs: add xfs_agbno_to_fsb and xfs_agbno_to_daddr helpers (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the agno argument to xfs_free_ag_extent (Carlos Maiolino) [RHEL-112145]
  - xfs: pass a pag to xfs_difree_inode_chunk (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the unused pag_active_wq field in struct xfs_perag (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the unused pagb_count field in struct xfs_perag (Carlos Maiolino) [RHEL-112145]
  - xfs: fix superfluous clearing of info->low in __xfs_getfsmap_datadev (Carlos Maiolino) [RHEL-112145]
  - xfs: remove xfs_page_mkwrite_iomap_ops (Carlos Maiolino) [RHEL-112145]
  - xfs: remove __xfs_filemap_fault (Carlos Maiolino) [RHEL-112145]
  - xfs: split write fault handling out of __xfs_filemap_fault (Carlos Maiolino) [RHEL-112145]
  - xfs: split the page fault trace event (Carlos Maiolino) [RHEL-112145]
  - xfs: sb_spino_align is not verified (Carlos Maiolino) [RHEL-112145]
  - xfs: simplify sector number calculation in xfs_zero_extent (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the redundant xfs_alloc_log_agf (Carlos Maiolino) [RHEL-112145]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-647.el9]
changelog:
  - iommufd/driver: Fix counter initialization for counted_by annotation (Eder Zulian) [RHEL-131315]
  - iommufd/iommufd_private.h: Avoid -Wflex-array-member-not-at-end warning (Eder Zulian) [RHEL-131315]
  - iommufd: Don't overflow during division for dirty tracking (Eder Zulian) [RHEL-131315]
  - platform/x86/intel/pmc: Add Wildcat Lake support to intel_pmc_core (David Arcari) [RHEL-95623]
  - scsi: mpi3mr: Fix mpi3mr_host_attrs struct (Tomas Henzl) [RHEL-89712]
  - sched/fair: Fix pelt lost idle time detection (Phil Auld) [RHEL-128251]
  - sched: Fix sched_numa_find_nth_cpu() if mask offline (Phil Auld) [RHEL-128251]
  - selftests/bpf: add cgroup_skb netns cookie tests (Jerome Marchand) [RHEL-110279]
  - bpf: add get_netns_cookie helper to cgroup_skb programs (Jerome Marchand) [RHEL-110279]
  - selftests/bpf: add tcx netns cookie tests (Jerome Marchand) [RHEL-110279]
  - bpf: add get_netns_cookie helper to tc programs (Jerome Marchand) [RHEL-110279]
  - bpf: Check the helper function is valid in get_helper_proto (Jerome Marchand) [RHEL-110279]
  - bpf: Fix oob access in cgroup local storage (Jerome Marchand) [RHEL-110279]
  - bpf: Move cgroup iterator helpers to bpf.h (Jerome Marchand) [RHEL-110279]
  - bpf: Move bpf map owner out of common struct (Jerome Marchand) [RHEL-110279]
  - bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps (Jerome Marchand) [RHEL-110279]
  - bpf: Add cookie object to bpf maps (Jerome Marchand) [RHEL-110279]
  - bpf, arm64: Fix fp initialization for exception boundary (Jerome Marchand) [RHEL-110279]
  - libbpf: Verify that arena map exists when adding arena relocations (Jerome Marchand) [RHEL-110279]
  - selftests/bpf: Range analysis test case for JSET (Jerome Marchand) [RHEL-110279]
  - bpf: Forget ranges when refining tnum after JSET (Jerome Marchand) [RHEL-110279]
  - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (Jerome Marchand) [RHEL-110279]
  - bpftool: Fix JSON writer resource leak in version command (Jerome Marchand) [RHEL-110279]
  - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (Jerome Marchand) [RHEL-110279]
  - kasan: use vmalloc_dump_obj() for vmalloc error reports (Audra Mitchell) [RHEL-104908]
  - mm/damon/lru_sort: reset enabled when DAMON start failed (Audra Mitchell) [RHEL-104908]
  - mm/damon/reclaim: reset enabled when DAMON start failed (Audra Mitchell) [RHEL-104908]
  - kasan: remove kasan_find_vm_area() to prevent possible deadlock (Audra Mitchell) [RHEL-104908] {CVE-2025-38510}
  - mm/migrate: fix do_pages_stat in compat mode (Audra Mitchell) [RHEL-104908]
  - mm/hugetlb: don't crash when allocating a folio if there are no resv (Audra Mitchell) [RHEL-104908]
  - mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write (Audra Mitchell) [RHEL-104908] {CVE-2025-38258}
  - mm: shmem: add missing shmem_unacct_size() in __shmem_file_setup() (Audra Mitchell) [RHEL-104908]
  - mm: pcp: increase pcp->free_count threshold to trigger free_high (Audra Mitchell) [RHEL-104908]
  - mm: page_alloc: remove redundant READ_ONCE (Audra Mitchell) [RHEL-104908]
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Audra Mitchell) [RHEL-104908]
  - kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() (Audra Mitchell) [RHEL-104908]
  - mm: (un)track_pfn_copy() fix + doc improvements (Audra Mitchell) [RHEL-104908]
  - mm/gup: remove unnecessary check in memfd_pin_folios() (Audra Mitchell) [RHEL-104908]
  - mm: fix filemap_get_folios_contig returning batches of identical folios (Audra Mitchell) [RHEL-104908]
  - mm/memblock: repeat setting reserved region nid if array is doubled (Audra Mitchell) [RHEL-104908]
  - mm/memblock: pass size instead of end to memblock_set_node() (Audra Mitchell) [RHEL-104908]
  - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (Audra Mitchell) [RHEL-104908] {CVE-2025-22090}
  - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn (Audra Mitchell) [RHEL-104908]
  - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages (Audra Mitchell) [RHEL-104908]
  - mm/damon/sysfs-schemes: avoid Wformat-security warning on damon_sysfs_access_pattern_add_range_dir() (Audra Mitchell) [RHEL-104908]
  - mm/mremap: correctly handle partial mremap() of VMA starting at 0 (Audra Mitchell) [RHEL-104908]
  - mm: respect mmap hint address when aligning for THP (Audra Mitchell) [RHEL-104908]
  - mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify() (Audra Mitchell) [RHEL-104908]
  - mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats (Audra Mitchell) [RHEL-104908]
  - mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true (Audra Mitchell) [RHEL-104908]
  - kmsan: remove an x86-specific #include from kmsan.h (Audra Mitchell) [RHEL-104908]
  - kmsan: remove a useless assignment from kmsan_vmap_pages_range_noflush() (Audra Mitchell) [RHEL-104908]
  - mm: hugetlb_vmemmap: fix reference to nonexistent file (Audra Mitchell) [RHEL-104908]
  - net/packet: fix a race in packet_set_ring() and packet_notifier() (Davide Caratti) [RHEL-115650]
  - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Davide Caratti) [RHEL-115650]
  - af_packet: fix soft lockup issue caused by tpacket_snd() (Davide Caratti) [RHEL-115650]
  - af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() (Davide Caratti) [RHEL-115650]
  - net: loopback: Avoid sending IP packets without an Ethernet header (Davide Caratti) [RHEL-115650]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-648.el9]
changelog:
  - crypto: iaa - Fix incorrect return value in save_iaa_wq() (CKI Backport Bot) [RHEL-132475]
  - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-127602]
  - blk-cgroup: fix possible deadlock while configuring policy (Ming Lei) [RHEL-129939]
  - cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes (David Arcari) [RHEL-128549]
  - selftests/landlock: Add a new test for setuid() (Štěpán Horáček) [RHEL-125143]
  - selftests/landlock: Split signal_scoping_threads tests (Štěpán Horáček) [RHEL-125143]
  - landlock: Always allow signals between threads of the same process (Štěpán Horáček) [RHEL-125143]
  - landlock: Prepare to add second errata (Štěpán Horáček) [RHEL-125143]
  - landlock: Add the errata interface (Štěpán Horáček) [RHEL-125143]
  - selftests/landlock: Test signal scoping for threads (Štěpán Horáček) [RHEL-125143]
  - selftests/landlock: Test signal scoping (Štěpán Horáček) [RHEL-125143]
  - landlock: Add signal scoping (Štěpán Horáček) [RHEL-125143]
  - nvme: tcp: Fix compilation warning with W=1 (John Meneghini) [RHEL-76529]
  - nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (John Meneghini) [RHEL-76529]
  - wifi: iwlwifi: Fix incorrect logic on cmd_ver range checking (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: dvm: restore n_no_reclaim_cmds setting (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: Limit cb_size to valid range (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: don't wait when there is no vdev started (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: don't use static variables in ath12k_wmi_fw_stats_process() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: avoid burning CPU while waiting for firmware stats (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix documentation on firmware stats (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: don't activate more links than firmware supports (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: update link active in case two links fall on the same MAC (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: support WMI_MLO_LINK_SET_ACTIVE_CMDID command (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: update freq range for each hardware mode (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: parse and save sbs_lower_band_end_freq from WMI_SERVICE_READY_EXT2_EVENTID event (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: parse and save hardware mode info from WMI_SERVICE_READY_EXT_EVENTID event for later use (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Avoid CPU busy-wait by handling VDEV_STAT and BCN_STAT (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: don't WARN for late channel/color switch (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: drop invalid source address OCB frames (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: remove zero-length arrays (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: coex: Add PTA grant signal setting offload to firmware feature (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: coex: Update hardware PTA resource binding logic (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: coex: Update BTG control for WiFi 7 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: coex: Update Pre-AGC logic for WiFi 7 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: coex: Add H2C command to collect driver outsource information to firmware (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: coex: refine debug log with format version and readable string (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: coex: Update Wi-Fi status logic for WiFi 7 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: coex: Implement Wi-Fi MLO related logic (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: coex: RTL8922A add Wi-Fi firmware support for v0.35.63.0 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: introduce rtw89_query_mr_chanctx_info() for multi-role chanctx info (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: scan abort when assign/unassign_vif (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: enlarge TX retry count when GC auth (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: use anchor pattern when bcn offset less than min of tob (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: clear normal flow NoA when MCC start (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: enlarge scan time of GC when GO in MCC (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: adjust TX nulldata early time from 3ms to 7ms (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: TX nulldata 0 after scan complete (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: stop TX during MCC prepare (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: adjust beacon filter when MCC and detect connection (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: correct frequency when MCC (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: update format of RF notify MCC H2C command (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: extend HW scan of WiFi 6 chips for extra OP chan when concurrency (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtlwifi: rtl8821ae: make the read-only array params static const (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtlwifi: avoid stack size warning for _read_eeprom_info (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: cfg80211: use kfree_sensitive() for connkeys cleanup (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: move iwl-context-info header files (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: add missing TOP reset code (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: respect AUTO_EML_ENABLE in iwl_mld_int_mlo_scan() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: respect AUTO_EML_ENABLE in iwl_mld_retry_emlsr() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: remove unneeded compilations (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: Enable AP and adhoc modes for SDIO again (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: Rename the RTW_WCPU_11{AC,N} enums (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: 8922a: pass channel information when enter LPS (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: add chip_ops::chan_to_rf18_val to get code of RF register value (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mac: add dummy handler of MAC C2H event class 27 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: rfk: support IQK firmware command v1 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: fw: add RFE type to RF TSSI H2C command (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: 8852c: increase beacon loss to 6 seconds (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: fix EHT 20MHz TX rate for non-AP STA (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: add EHT physts and adjust init flow accordingly (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: implement channel switch support (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: chan: re-config default chandef only when none is registered (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: chan: concentrate the logic of setting/clearing chanctx bitmap (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: sar: do not assert wiphy lock held until probing is done (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38647}
  - wifi: rtw89: fix spelling mistake of RTW89_FLAG_FORBIDDEN_TRACK_WORK (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38657}
  - wifi: rtw89: pci: add PCI Express error handling (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: pci: add PCI Express error handling (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtlwifi: Constify struct rtl_hal_ops and rtl_hal_cfg (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: d3: Avoid -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix hal_reo_cmd_status kernel-doc (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38414}
  - wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: consistently use ath11k_mac_get_fw_stats() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: move locking outside of ath11k_mac_get_fw_stats() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: adjust unlock sequence in ath11k_update_stats_event() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: move some firmware stats related functions outside of debugfs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: don't wait when there is no vdev started (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: don't use static variables in ath11k_debugfs_fw_stats_process() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath10k: Avoid vdev delete timeout when firmware is already down (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - ath10k: snoc: fix unbalanced IRQ enable in crash recovery (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: Move regulatory domain initialization (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: fix non-MSIX handshake register (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: avoid panic on init failure (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38121}
  - wifi: iwlwifi: mvm: fix assert on suspend (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: Work around Clang loop unrolling bug (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: support power delta calculation for 5 TX paths (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: fix available_antennas setting (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: fix RX buffer size of MCU event (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: change max beacon size (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: fix invalid NSS setting when TX path differs from NSS (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: drop fragments with multicast or broadcast RA (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38343}
  - wifi: mt76: mt7996: set EHT max ampdu length capability (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: fix beamformee SS field (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: remove capability of partial bandwidth UL MU-MIMO (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7925: add test mode support (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7925: extend MCU support for testmode (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7925: ensure all MCU commands wait for response (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7925: refine the sniffer commnad (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7925: prevent multiple scan commands (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38155}
  - wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38156}
  - wifi: mt76: mt7925: add RNR scan support for 6GHz (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: add mt76_connac_mcu_build_rnr_scan_param routine (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix regdomain update failure when connection establishes (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix regdomain update failure when adding interface (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix regdomain update failure after 11D scan completes (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: remove duplicate check in mt7996_mcu_sta_mld_setup_tlv() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: fix uninitialized symbol warning (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: avoid null deref in mt7996_stop_phy() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: avoid NULL pointer dereference in mt7996_set_monitor() (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38316}
  - wifi: mt76: mt7921: add 160 MHz AP for mt7922 device (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7925: fix host interrupt register initialization (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7925: introduce thermal protection (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: Remove an unneeded local variable in mt76x02_dma_init() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - Revert "wifi: mt76: mt7996: fill txd by host driver" (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38281}
  - wifi: mt76: mt7925: add EHT preamble puncturing (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: rework radar HWRDD idx (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7915: rework radar HWRDD idx (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7915: set correct background radar capability (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: add PCI device id for mt7990 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: rework background radar check for mt7990 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: connac: rework TX descriptor and TX free for mt7990 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: adjust HW capabilities for mt7990 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: add eeprom support for mt7990 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: rework register mapping for mt7990 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: rework DMA configuration for mt7990 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: rework WA mcu command for mt7990 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: connac: add support to load firmware for mt7990 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mt76: mt7996: add macros for pci device ids (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: accept probe response on link address as well (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: validate SCAN_FLAG_AP in scan request during MLO (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: check if socket flags are valid (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix mac pdev frequency range update (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath9k_htc: Abort software beacon handling if disabled (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38157}
  - wifi: ath12k: remove redundant regulatory rules intersection logic in host (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Send MCS15 support to firmware during peer assoc (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix scan initiation failure handling (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix memory leak in WMI firmware stats (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix ring-buffer corruption (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-39890}
  - wifi: ath12k: support usercase-specific firmware overrides (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Adjust the process of resource release for ahb bus (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Reorder and relocate the release of resources in ath12k_core_deinit() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: print device dp stats in debugfs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Add device dp stats support (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: change soc name to device name (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix invalid RSSI values in station dump (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: pass link_conf for tx_arvif retrieval (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: update EMLSR capabilities of ML Station (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Prevent multicast duplication for dynamic VLAN (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Enable AST index based address search in Station Mode (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: enable monitor mode for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: use different packet offset for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: init monitor parameters for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add support to reap and process mon dest ring (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: use ath12k_buffer_addr in ath12k_dp_rx_link_desc_return() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add support to reap and process monitor status ring (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add monitor mode handler by monitor status ring interrupt (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add interrupt configuration for mon status ring (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add ring config for monitor mode on WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add srng config template for mon status ring (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: avoid call ath12k_dp_mon_parse_rx_dest_tlv() for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: parse msdu_end tlv in ath12k_dp_mon_rx_parse_status_tlv() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Abort scan before removing link interface to prevent duplicate deletion (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: use WMI_VDEV_SET_TPC_POWER_CMDID when EXT_TPC_REG_SUPPORT for 6 GHz (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add handler for WMI_VDEV_SET_TPC_POWER_CMDID (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fill parameters for vdev set TPC power WMI command (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: save max transmit power in vdev start response event from firmware (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add parse of transmit power envelope element (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: save power spectral density(PSD) of regulatory rule (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: update regulatory rules when connection established (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: update regulatory rules when interface added (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: determine interface mode in _op_add_interface() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: store reg info for later use (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: move reg info handling outside (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add support to select 6 GHz regulatory type (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: refactor ath12k_reg_build_regd() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: refactor ath12k_reg_chan_list_event() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix a possible dead lock caused by ab->base_lock (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: delete mon reap timer (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Add support to simulate firmware crash (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: support DBS and DFS compatibility (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: fix rx completion meta data corruption (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: fix ring-buffer corruption (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: Fix QMI memory reuse logic (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath9k: ahb: do ioremap resource in one step (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath10k: Constify structures in hw.c (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath10k: Fix spelling mistake "comple" -> "complete" (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Use scan link ID 15 for all scan operations (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: handle scan link during vdev create (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: read country code from SMBIOS for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: handle non-MLO mode as well in ieee80211_num_beaconing_links() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: fix firmware scan delay unit for WiFi 6 chips (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: avoid redundant recalculations if no chance to improve (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: deal with non-periodic NoA (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: introduce calculation of anchor pattern (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: add courtesy mechanism conditions to P2P roles (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: drop queued chanctx changes when stopping (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: pass whom to stop at when pausing chanctx (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: Fix the random "error beacon valid" messages for USB (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: usb: Upload the firmware in bigger chunks (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: usb: Reduce control message timeout to 500 ms (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: pci: enlarge retry times of RX tag to 1000 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: leave idle mode when setting WEP encryption for AP mode (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: pci: configure manual DAC mode via PCI config API only (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38429 CVE-2025-38284}
  - wifi: iwlwifi: mld: allow 2 ROCs on the same vif (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: fw: api: include required headers in rs/location (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: rename ctx-info-gen3 to ctx-info-v2 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: fix a wrong comment (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: map iwl_context_info to the matching struct (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: remove unused macro (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: unify iwlagn_scd_bc_tbl_entry and iwl_gen3_bc_tbl_entry (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: use bc entries instead of bc table also for pre-ax210 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: remove GEN3 from a couple of macros (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: use normal versioning convention for iwl_tx_cmd (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: stop supporting TX_CMD_API_S_VER_8 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: reduce configuration struct size (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: clean up dr/br configs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: Add helper function to extract device ID (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: mark Ty devices as discrete (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove MAC type/step matching (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: add a couple of older devices (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: fix PE RF names (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: fix and clean up FM/WH device matching (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: clean up GF device matching (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: clean up JF device matching (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: tests: make subdev match test more precise (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: clean up HR device matching (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: unify and add some Killer devices (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: fix and unify Killer/JF configs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: fix Ma device configs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: fix some device names (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove some unused names (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: add debug log instead of warning (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: dbg: fix dump trigger split check (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm/mld: allow puncturing use in 5 GHz (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: add support for ROC on BSS (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: Block EMLSR only when ready to enter ROC (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: move aux_sta member from iwl_mld_link to iwl_mld_vif (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: Fix ROC activity cleanup in iwl_mld_vif (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: Correct comments for cleanup functions (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: rename iwl_cfg to iwl_rf_cfg (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: clean up Sc/Dr/Br configs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: add FM RF config (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: add GF RF config (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: unify HR configs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: unify JF configs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: unify num_rbds config (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: add ucode API min/max to MAC config (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: declare MLO support if prerequisites are met (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: debug: add mlo_mode dbgfs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: debug: add FW log component for MLO (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: debug: add MLD table dump (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: debug: extend dbgfs for MLO (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: add MLO track for MLSR switch decision (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: add handling of mlo_link_cfg H2C command and C2H event (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: chan: re-calculate MLO DBCC mode during setting channel (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: send nullfunc based on the given link (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: allow driver to do specific band TX for MLO (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: extract link part from core tx write function (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: rtw8822bu VID/PID for BUFFALO WI-U2-866DM (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: Handle RTL8723D(S) with blank efuse (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: Fix RX aggregation settings for RTL8723DS (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: remove unused high_temp from iwl_cfg (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: move MAC parameters to MAC data (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove DCCM offsets from new devices (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove eeprom_size from new devices (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: rename struct iwl_base_params (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove rf_id field (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove dbgc_supported field (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: rename cfg_trans_params to mac_cfg (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pass trans to iwl_parse_nvm_mcc_info() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove nvm_hw_section_num from new devices (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: handle cc firmware dynamically (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: build ax210 family FW names dynamically (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove 'cdb' value (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove QuZ/JF special cases (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: build 9000 series FW filenames dynamically (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: add JF1/JF2 RF for dynamic FW building (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: remove 0x2726 devices (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: inline HT params (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove 6 GHz from ht40_bands (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: call thermal exit without wiphy lock held (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: avoid init-after-queue (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: use a radio/system specific power budget (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: use a radio/system specific power budget (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: fix thermal code compilation with -Werror=cast-qual (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: remove iwl_trans_pcie_gen2_send_hcmd (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: Add support for a new version for link config command (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: Add a new version for mac config command (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: Add a new version for sta config command (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: add range response version 10 support (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: remove one more error in unallocated BAID (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: Update MCS15 support in link_conf (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: brcmfmac: Fix structure size for WPA3 external SAE (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: brcmfmac: cyw: support external SAE authentication in station mode (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: brcmfmac: make per-vendor event map const (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: brcmfmac: support per-vendor cfg80211 callbacks and firmware events (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: do not offer a mesh path if forwarding is disabled (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: handle v3 rates (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: add RFI_CONFIG_CMD to iwl_mld_system_names array (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: fix 6005N/SFF match (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: make iwl_uefi_get_uats_table() return void (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: drop whtc RF (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: add support PE RF (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: debug: set CDB indication from CSR (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: fix beacon CCK flag (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: remove NVM C step override (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: dvm: init 'keep_alive_beacons' in power tables (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: add debugfs for using ptp clock time for monitor interface (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: log async commands (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: don't check the TPT counters when scanning (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: print the DSM value when read from UEFI (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: tests: simplify devinfo_no_trans_cfg_dups() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: use minimum API version 97 for Sc/Dr (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: tests: allow same config for different MACs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: bump FW API to 99 for BZ/SC/DR devices (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: remove HT greenfield support (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: don't report bad EHT rate to mac80211 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: don't report bad EHT rate to mac80211 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: build HT/VHT injected rate in v2 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: rename modulation type values (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: fw: remove RATE_MCS_NSS_POS (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: remove sku_id from trans (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: trans: move ext_32khz_clock_valid to config (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: move STEP config into trans->conf (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: rework transport configuration (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: trans: collect device information (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: trans: remove SCD base address validation (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlfiwi: mvm: Fix the rate reporting (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: remove bc_table_dword transport config (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: remove constant wdg_timeout (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: trans: remove hw_wfpm_id (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: trans: remove hw_id_str (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pass full FW info to transport (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: handle reasons recommended by FW for leaving EMLSR (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: remove PM mode and send-in-D3 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: unexport iwl_trans_pcie_send_hcmd() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: move wait_command_queue into PCIe (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: move invalid TX CMD into PCIe (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: move ME check data to pcie (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: rename "continuous" memory (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: remove iwl_cmd_groups_verify_sorted() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: add command order checks to kunit (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: don't call itself indirectly (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove unnecessary configs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: reduce mac_type to u8 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: tests: check for duplicate name strings (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: move all names out of configs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: finish config split (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: minor fixes for Sc (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: remove 'ent' argument from alloc (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: rename BW_NO_LIMIT to BW_NOT_LIMITED (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: clean up BW limit and subdev matching (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: tests: check transport configs are not duplicated (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: tests: check configs are not duplicated (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove iwl_cfg_br (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove duplicated Sc device configs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove duplicated iwl_cfg_gl (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove iwl_ax201_cfg_qu_hr (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove max_tx_agg_size (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove unused config externs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: unify Killer 1650s/i with Qu/Hr (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: unify Qu/QuZ configs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: cfg: remove fw_name_mac (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: tests: check for device names (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: add entry for Killer AX1650i on AdL-P (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: unify some configurations (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: remove duplicated line (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: Add support for new device ids (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: remove TH/TH1 RF types (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: clean up config macro (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: remove nl80211 testmode (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: set rx_mpdu_cmd_hdr_size (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: dvm: fix various W=1 warnings (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: force the responder to use the full bandwidth (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: start AP with the correct bandwidth (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: add monitor internal station (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: support for COMPRESSED_BA_RES_API_S_VER_7 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: support iwl_mac_power_cmd version 2 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: implement TOP reset (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: handle SW reset w/o NIC error (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: support ROC command version 6 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: support iwl_mac_power_cmd version 2 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: add support for ALIVE v8 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: add kunit test for emlsr with bt on (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: fw: support PPAG command version 7 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: fw: support reading PPAG BIOS table revision 4 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: rename ppag_ver to ppag_bios_rev (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: don't return an error if the FW is dead (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: check for NULL before referencing a pointer (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: allow EMLSR with 2.4 GHz when BT is ON (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: implement TOP reset follower (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: avoid scheduling restart during restart (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: tests: extend link pair tests (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: refactor tests to use chandefs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: send the WPFC table to the FW (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: read WPFC also from UEFI (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: prepare for reading WPFC from UEFI (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: Add short description to enum iwl_power_scheme (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: constrain TX power according to dynamic antenna power table (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: phy: add C2H event handler for report of FW scan (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: Fix inadverent sharing of struct ieee80211_supported_band data (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: Convert rtw89_core_set_supported_band to use devm_* (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: introduce helper to get designated link for MLO (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: roc: dynamically handle link id and link instance index (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: Fill in correct Rx link ID for MLO (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: add MLD capabilities declaration (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: extend join_info H2C command for MLO fields (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: Configure scan band when mlo_dbcc_mode changes (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: extend mapping from Qsel to DMA ch for MLO (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: Adjust management queue mapping for [MLO, HW-1] (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: 8922a: use SW CRYPTO when broadcast in MLO mode (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: 8922a: rfk: adjust timeout time of RX DCK (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: fw: Remove "const" on allocation type (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtlwifi: Remove unused rtl_bb_delay() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtlwifi: Remove uncalled stub rtl*_phy_ap_calibrate (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtlwifi: Remove unused rtl_usb_{resume|suspend} (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: avoid that loose pattern sets negative timing for auxiliary GO (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: refine filling function of start TSF (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: support courtesy mechanism on both roles at the same time (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: update entire plan when courtesy config changes (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: handle the case where NoA start time has passed (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: make GO+STA mode calculate dynamic beacon offset (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: don't re-randomize TSF of AP/GO (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: mcc: make GO announce one-time NoA for HW scan process (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: refactor flow that hw scan handles channel list (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: add suffix "_ax" to Wi-Fi 6 HW scan struct and func (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: acpi: introduce country specific TAS enabling (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: 8922a: increase beacon loss to 6 seconds (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: set pre-calculated antenna matrices for HE trigger frame (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: regd: indicate if regd_UK TX power settings follow regd_ETSI (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: 8922a: fix TX fail with wrong VCO setting (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: 8852c: update supported firmware format to 2 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: move phy_filters to fw_runtime (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: make sure to lock rxq->read (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: add definitions for iwl_mac_power_cmd version 2 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: simplify iwl_mld_rx_fill_status() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: rx: simplify channel handling (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: clean up band in RX metadata (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: skip unknown FW channel load values (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: define API for external FSEQ images (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: allow EMLSR on separated 5 GHz subbands (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: use cfg80211_chandef_get_width() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: fix iwl_mld_emlsr_disallowed_with_link() return (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: clarify variable type (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: pcie: add support for the reset handshake in MSI (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: restructure tx profile retrieval for MLO MBSSID (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: nl80211: add link id of transmitted profile for MLO MBSSID (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ieee80211: Add helpers to fetch EMLSR delay and timeout values (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: update ML STA with EML capabilities (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: cfg80211: Add support to get EMLSR capabilities of non-AP MLD (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: VLAN traffic in multicast path (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: Create separate links for VLAN interfaces (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: Add link iteration macro for link data (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: remove mwifiex_sta_init_cmd() last argument (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: drop asynchronous init waiting code (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: let mwifiex_init_fw() return 0 for success (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: remove unnecessary queue empty check (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: set step_urm in transport and not in the opmodes (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: tests: simplify le32 bitfield handling (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: update the PHY_CONTEXT_CMD API (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: properly handle async notification in op mode start (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: refactor purging async notifications (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: don't do iwl_trans_stop_device twice (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: stop hw if mcc_init fails (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: avoid memory leak if mcc_init fails (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: remove stored_beacon support (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mld: remove P2P powersave tracking (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: parse active and 20 MHz AP NVM channel flag (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: re-add IWL_AMSDU_8K case (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: fw: do reset handshake during assert if needed (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: remove IWL_EMPTYING_HW_QUEUE_DELBA state (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: brcm80211: fmac: Add error log in brcmf_usb_dl_cmd() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ieee80211: define beacon protection bit field (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: Don't use %pK through printk (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: brcmsmac: Spelling corrections (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: move common settings out of switch/case (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: make locally used function static (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: fix indention (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: simplify mwifiex_setup_ht_caps() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: pass adapter to mwifiex_dnld_cmd_to_fw() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: make region_code_mapping_t const (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: drop unnecessary initialization (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: use adapter as context pointer for mwifiex_hs_activated_event() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mwifiex: deduplicate code in mwifiex_cmd_tx_rate_cfg() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: Replace __get_unaligned_cpu32 in mesh_pathtbl.c (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - Revert "mac80211: Dynamically set CoDel parameters per station" (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: cfg80211/mac80211: remove more 5/10 MHz code (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: Avoid -Wflex-array-member-not-at-end warning (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: mac80211: Avoid -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: fw: api: Absolute rudimentary typo fixes in the file power.h (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: iwlwifi: mvm: Remove duplicated include in iwl-utils.c (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: free SKBTX_WIFI_STATUS skb tx_flags flag (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rt2x00: remove weird self-assignment in rt2800_loft_search() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: wcn36xx: Don't use %pK through printk (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Don't use %pK through printk (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: Don't use %pK through printk (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath10k: Don't use %pK through printk (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix node corruption in ar->arvifs list (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38290}
  - wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38291}
  - wifi: ath12k: avoid multiple skb_cb fetch in ath12k_mac_mgmt_tx_wmi() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix wrong handling of CCMP256 and GCMP ciphers (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix the QoS control field offset to build QoS header (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Avoid allocating rx_stats when ext_rx_stats is disabled (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: avoid deadlock during regulatory update in ath12k_regd_update() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Add MSDU length validation for TKIP MIC error (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: correctly handle mcast packets for clients (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: using msdu end descriptor to check for rx multicast packets (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Update frequency range if reg rules changes (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix frequency range in driver (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Add helper function ath12k_mac_update_freq_range() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Use skb->len for dma_unmap_single() length parameter (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix memory leak during extended skb allocation (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Refactor tx descriptor handling in tx completion handler (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Handle error cases during extended skb allocation (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: do not ignore hardware read error during DPK (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: support 2 channels for single pdev device (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: don't skip non-primary links for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: alloc REO queue per station (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: group REO queue buffer parameters together (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: make assoc link associate first (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: identify assoc link vif in station mode (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: support MLO as well if single_chip_mlo_support flag is set (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: use fw_features only when it is valid (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: introduce ath12k_fw_feature_supported() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: reset MLO global memory during recovery (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: handle ath12k_core_reset() with hardware grouping (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: handle ath12k_core_restart() with hardware grouping (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix ath12k_core_pre_reconfigure_recovery() with grouping (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix firmware assert during reboot with hardware grouping (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix ATH12K_FLAG_REGISTERED flag handling (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix failed to set mhi state error during reboot with hardware grouping (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add reference counting for core attachment to hardware group (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix SLUB BUG - Object already free in ath12k_reg_free() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix buffer overflow in debugfs (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38317}
  - wifi: ath12k: Fix a couple NULL vs IS_ERR() bugs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: Use of_property_present() to test property presence (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix WMI tag for EHT rate in peer assoc (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Disable broadcast TWT feature in HE MAC capabilities (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Introduce check against zero for ahvif->key_cipher in ath12k_mac_op_tx() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Resolve multicast packet drop by populating key_cipher in ath12k_install_key() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix cleanup path after mhi init (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Add support for link specific datapath stats (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: replace the usage of rx desc with rx_info (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add rx_info to capture required field from rx descriptor (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: ahb: Replace del_timer_sync() with timer_delete_sync() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: Fix the module names printed in dmesg (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: Don't set SUPPORTS_AMSDU_IN_AMPDU for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: Set AMPDU factor to hardware for RTL8814A (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: usb: Enable RX aggregation for RTL8814AU (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: usb: Enable switching the RTL8814AU to USB 3 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix misspelling "upto" in dp.c (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix invalid memory access while forming 802.11 header (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix memory leak during vdev_id mismatch (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix incorrect rates sent to firmware (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Add support to clear qdesc array in REO cache (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix the enabling of REO queue lookup table feature (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: fix node corruption in ar->arvifs list (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38293}
  - wifi: ath12k: Fix spelling errors in mac.c file (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: store and send country code to firmware after recovery (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add 11d scan offload support (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: use correct WMI command to set country code for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add configure country code for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Fix memory leak due to multiple rx_stats allocation (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38199}
  - Reapply "wifi: ath11k: restore country code during resume" (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: choose default PM policy for hibernation (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: support non-WoWLAN mode suspend as well (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: refactor ath11k_core_suspend/_resume() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: introduce ath11k_core_continue_suspend_resume() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath11k: determine PM policy based on machine model (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: usb: Remove redundant 'flush_workqueue()' calls (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw88: sdio: Remove redundant 'flush_workqueue()' calls (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: 8852bx: support different SAR configs by antenna (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: 8852c: support different SAR configs by antenna (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: 8922a: support different SAR configs by antenna (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: sar: add skeleton for different configs by antenna (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: acpi: support loading GEO SAR tables (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: acpi: support loading dynamic SAR tables and indicator (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: acpi: support loading static SAR table (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: acpi: introduce method evaluation function for reuse (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: sar: add skeleton for SAR configuration via ACPI (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: sar: introduce structure to wrap query parameters (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: regd: introduce string getter for reuse (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: fix typo of "access" in rtw89_sar_info description (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: phy: reset value of force TX power for MAC ID (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: fw: cast mfw_hdr pointer from address of zeroth byte of firmware->data (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: rtw89: set 2TX for 1SS rate by default (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: extend dma mask to 36 bits (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add monitor interface support on QCN9274 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Move to NO_VIRTUAL monitor (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Refactor the monitor channel context procedure (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix NULL access in assign channel context handler (Jose Ignacio Tornos Martinez) [RHEL-122977] {CVE-2025-38294}
  - wifi: ath12k: Avoid packet offset and FCS length from Rx TLV (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: change the status update in the monitor Rx (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Replace band define G with GHZ where appropriate (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Avoid fetch Error bitmap and decap format from Rx TLV (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Add extra TLV tag parsing support in monitor Rx path (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix link valid field initialization in the monitor Rx (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: enable ath12k AHB support (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Power down userPD (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Power up userPD (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Register various userPD interrupts and save SMEM entries (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Power up root PD (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add AHB driver support for IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add support for fixed QMI firmware memory (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Add hw_params to remap CE register space for IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: avoid m3 firmware download in AHB device IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add ath12k_hw_params for IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: refactor ath12k_hw_regs structure (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: fix incorrect CE addresses (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: don't put ieee80211_chanctx_conf struct in ath12k_link_vif (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: remove open parenthesis (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: add get_txpower mac ops (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: move firmware stats out of debugfs (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Pass correct values of center freq1 and center freq2 for 320 MHz (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160 MHz (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - treewide: Switch/rename to timer_delete[_sync]() [partial] (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - asm-generic: Add memory barrier dma_mb() (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - Reapply "wifi: iwlwifi: add support for BE213" (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - Reapply "wifi: iwlwifi: make no_160 more generic" (Jose Ignacio Tornos Martinez) [RHEL-122977]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-122977]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-649.el9]
changelog:
  - x86/CPU/AMD: Extend Zen6 model range (David Arcari) [RHEL-128550]
  - sched: Increase sched_tick_remote timeout (Phil Auld) [RHEL-102425]
  - perf: Enable debuginfod support (Michael Petlan) [RHEL-124984]
  - scsi: qla4xxx: Fix typos in comments (Chris Leech) [RHEL-121669]
  - scsi: qla4xxx: Prevent a potential error pointer dereference (Chris Leech) [RHEL-121669]
  - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (Chris Leech) [RHEL-121669]
  - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (Chris Leech) [RHEL-121669]
  - scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() (Chris Leech) [RHEL-121669]
  - scsi: iscsi: Fix incorrect error path labels for flashnode operations (Chris Leech) [RHEL-121669]
  - scsi: qla4xxx: Remove duplicate struct crb_addr_pair (Chris Leech) [RHEL-121669]
  - scsi: qedi: Remove unused qedi_get_proto_itt() (Chris Leech) [RHEL-121669]
  - scsi: qedi: Remove unused sysfs functions (Chris Leech) [RHEL-121669]
  - RDMA/uverbs: Fix umem release in UVERBS_METHOD_CQ_CREATE (Kamal Heib) [RHEL-109942]
  - RDMA/efa: Add CQ with external memory support (Kamal Heib) [RHEL-109942]
  - IB/sa: Fix sa_local_svc_timeout_ms read race (Kamal Heib) [RHEL-109942]
  - RDMA/core: Resolve MAC of next-hop device without ARP support (Kamal Heib) [RHEL-109942]
  - RDMA/cm: Rate limit destroy CM ID timeout error message (Kamal Heib) [RHEL-109942]
  - IB: Extend UVERBS_METHOD_REG_MR to get DMAH (Kamal Heib) [RHEL-109942]
  - RDMA/core: Introduce a DMAH object and its alloc/free APIs (Kamal Heib) [RHEL-109942]
  - IB/core: Add UVERBS_METHOD_REG_MR on the MR object (Kamal Heib) [RHEL-109942]
  - RDMA/core: Add umem "is_contiguous" and "start_dma_addr" helpers (Kamal Heib) [RHEL-109942]
  - RDMA/uverbs: Add a common way to create CQ with umem (Kamal Heib) [RHEL-109942]
  - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (Kamal Heib) [RHEL-109942]
  - IB/cm: Use separate agent w/o flow control for REP (Kamal Heib) [RHEL-109942]
  - IB/mad: Add flow control for solicited MADs (Kamal Heib) [RHEL-109942]
  - IB/mad: Add state machine to MAD layer (Kamal Heib) [RHEL-109942]
  - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (Kamal Heib) [RHEL-109942]
  - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (Kamal Heib) [RHEL-109942]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (Kamal Heib) [RHEL-109942]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (Kamal Heib) [RHEL-109942]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (Kamal Heib) [RHEL-109942]
  - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-109942]
  - RDMA/ipoib: Use parent rdma device net namespace (Kamal Heib) [RHEL-109942]
  - RDMA/core: Extend RDMA device registration to be net namespace aware (Kamal Heib) [RHEL-109942]
  - RDMA/core: reduce stack using in nldev_stat_get_doit() (Kamal Heib) [RHEL-109942]
  - RDMA/core: Add driver APIs pre_destroy_cq() and post_destroy_cq() (Kamal Heib) [RHEL-109942]
  - IB/iser: Remove unnecessary local variable (Kamal Heib) [RHEL-109942]
  - scsi: core: Fix a regression triggered by scsi_host_busy() (Ming Lei) [RHEL-123480]
  - blk-mq: fix blk_mq_tags double free while nr_requests grown (Ming Lei) [RHEL-123480]
  - blk-mq: fix null-ptr-deref in blk_mq_free_tags() from error path (Ming Lei) [RHEL-123480]
  - blk-mq: Document tags_srcu member in blk_mq_tag_set structure (Ming Lei) [RHEL-123480]
  - blk-mq: Replace tags->lock with SRCU for tag iterators (Ming Lei) [RHEL-123480]
  - blk-mq: Defer freeing flush queue to SRCU callback (Ming Lei) [RHEL-123480]
  - blk-mq: Defer freeing of tags page_list to SRCU callback (Ming Lei) [RHEL-123480]
  - blk-mq: Pass tag_set to blk_mq_free_rq_map/tags (Ming Lei) [RHEL-123480]
  - blk-mq: Move flush queue allocation into blk_mq_init_hctx() (Ming Lei) [RHEL-123480]
  - block: fix potential deadlock while running nr_hw_queue update (Ming Lei) [RHEL-123480]
  - block: fix lockdep warning caused by lock dependency in elv_iosched_store (Ming Lei) [RHEL-123480]
  - block: move elevator queue allocation logic into blk_mq_init_sched (Ming Lei) [RHEL-123480]
  - objtool/rust: add one more `noreturn` Rust function (Joe Lawrence) [RHEL-114921]
  - objtool: Add vpanic() to the noreturn list (Joe Lawrence) [RHEL-114921]
  - objtool: Add missing endian conversion to read_annotate() (Joe Lawrence) [RHEL-114921]
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.89.0 (Joe Lawrence) [RHEL-114921]
  - objtool/rust: relax slice condition to cover more `noreturn` Rust functions (Joe Lawrence) [RHEL-114921]
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0 (Joe Lawrence) [RHEL-114921]
  - objtool: Speed up SHT_GROUP reindexing (Joe Lawrence) [RHEL-114921]
  - objtool: Fix up st_info in COMDAT group section (Joe Lawrence) [RHEL-114921]
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.86.0 (Joe Lawrence) [RHEL-114921]
  - objtool: Fix false-positive "ignoring unreachables" warning (Joe Lawrence) [RHEL-114921]
  - objtool, xen: Fix INSN_SYSCALL / INSN_SYSRET semantics (Joe Lawrence) [RHEL-114921]
  - objtool: Stop UNRET validation on UD2 (Joe Lawrence) [RHEL-114921]
  - objtool: Split INSN_CONTEXT_SWITCH into INSN_SYSCALL and INSN_SYSRET (Joe Lawrence) [RHEL-114921]
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (Joe Lawrence) [RHEL-114921]
  - objtool: Fix verbose disassembly if CROSS_COMPILE isn't set (Joe Lawrence) [RHEL-114921]
  - objtool: Change "warning:" to "error: " for fatal errors (Joe Lawrence) [RHEL-114921]
  - objtool: Always fail on fatal errors (Joe Lawrence) [RHEL-114921]
  - Revert "objtool: Increase per-function WARN_FUNC() rate limit" (Joe Lawrence) [RHEL-114921]
  - objtool: Append "()" to function name in "unexpected end of section" warning (Joe Lawrence) [RHEL-114921]
  - objtool: Ignore end-of-section jumps for KCOV/GCOV (Joe Lawrence) [RHEL-114921]
  - objtool: Silence more KCOV warnings, part 2 (Joe Lawrence) [RHEL-114921]
  - objtool: Fix STACK_FRAME_NON_STANDARD for cold subfunctions (Joe Lawrence) [RHEL-114921]
  - objtool: Fix segfault in ignore_unreachable_insn() (Joe Lawrence) [RHEL-114921]
  - objtool: Fix NULL printf() '%s' argument in builtin-check.c:save_argv() (Joe Lawrence) [RHEL-114921]
  - objtool: Remove redundant opts.noinstr dependency (Joe Lawrence) [RHEL-114921]
  - objtool: Remove --no-unreachable for noinstr-only vmlinux.o runs (Joe Lawrence) [RHEL-114921]
  - objtool: Fix up some outdated references to ENTRY/ENDPROC (Joe Lawrence) [RHEL-114921]
  - objtool: Reduce CONFIG_OBJTOOL_WERROR verbosity (Joe Lawrence) [RHEL-114921]
  - objtool: Improve error handling (Joe Lawrence) [RHEL-114921]
  - objtool: Properly disable uaccess validation (Joe Lawrence) [RHEL-114921]
  - objtool: Silence more KCOV warnings (Joe Lawrence) [RHEL-114921]
  - objtool: Fix init_module() handling (Joe Lawrence) [RHEL-114921]
  - objtool: Fix CONFIG_OBJTOOL_WERROR for vmlinux.o (Joe Lawrence) [RHEL-114921]
  - objtool: Ignore entire functions rather than instructions (Joe Lawrence) [RHEL-114921]
  - objtool: Warn when disabling unreachable warnings (Joe Lawrence) [RHEL-114921]
  - objtool: Fix detection of consecutive jump tables on Clang 20 (Joe Lawrence) [RHEL-114921]
  - objtool: Upgrade "Linked object detected" warning to error (Joe Lawrence) [RHEL-114921]
  - objtool: Consolidate option validation (Joe Lawrence) [RHEL-114921]
  - objtool: Increase per-function WARN_FUNC() rate limit (Joe Lawrence) [RHEL-114921]
  - objtool: Update documentation (Joe Lawrence) [RHEL-114921]
  - objtool: Improve __noreturn annotation warning (Joe Lawrence) [RHEL-114921]
  - objtool: Fix error handling inconsistencies in check() (Joe Lawrence) [RHEL-114921]
  - x86/traps: Make exc_double_fault() consistently noreturn (Joe Lawrence) [RHEL-114921]
  - objtool/LoongArch: Add support for goto table (Joe Lawrence) [RHEL-114921]
  - objtool/LoongArch: Add support for switch table (Joe Lawrence) [RHEL-114921]
  - objtool: Handle PC relative relocation type (Joe Lawrence) [RHEL-114921]
  - objtool: Handle different entry size of rodata (Joe Lawrence) [RHEL-114921]
  - objtool: Handle various symbol types of rodata (Joe Lawrence) [RHEL-114921]
  - objtool: Hide unnecessary compiler error message (Joe Lawrence) [RHEL-114921]
  - objtool/powerpc: Add support for decoding all types of uncond branches (Joe Lawrence) [RHEL-114921]
  - objtool/rust: add one more `noreturn` Rust function (Joe Lawrence) [RHEL-114921]
  - objtool: Add bch2_trans_unlocked_or_in_restart_error() to bcachefs noreturns (Joe Lawrence) [RHEL-114921]
  - objtool: Fix C jump table annotations for Clang (Joe Lawrence) [RHEL-114921]
  - vmlinux.lds: Ensure that const vars with relocations are mapped R/O (Joe Lawrence) [RHEL-114921]
  - objtool: Move dodgy linker warn to verbose (Joe Lawrence) [RHEL-114921]
  - objtool: Ignore dangling jump table entries (Joe Lawrence) [RHEL-114921]
  - objtool: Add bch2_trans_unlocked_error() to bcachefs noreturns (Joe Lawrence) [RHEL-114921]
  - x86/mm: Convert unreachable() to BUG() (Joe Lawrence) [RHEL-114921]
  - objtool: Allow arch code to discover jump table size (Joe Lawrence) [RHEL-114921]
  - objtool: Warn about unknown annotation types (Joe Lawrence) [RHEL-114921]
  - objtool: Fix ANNOTATE_REACHABLE to be a normal annotation (Joe Lawrence) [RHEL-114921]
  - objtool: Convert {.UN}REACHABLE to ANNOTATE (Joe Lawrence) [RHEL-114921]
  - objtool: Remove annotate_{,un}reachable() (Joe Lawrence) [RHEL-114921]
  - x86: Convert unreachable() to BUG() (Joe Lawrence) [RHEL-114921]
  - unreachable: Unify (Joe Lawrence) [RHEL-114921]
  - objtool: Collect more annotations in objtool.h (Joe Lawrence) [RHEL-114921]
  - objtool: Collapse annotate sequences (Joe Lawrence) [RHEL-114921]
  - objtool: Convert ANNOTATE_INTRA_FUNCTION_CALL to ANNOTATE (Joe Lawrence) [RHEL-114921]
  - objtool: Convert ANNOTATE_IGNORE_ALTERNATIVE to ANNOTATE (Joe Lawrence) [RHEL-114921]
  - objtool: Convert VALIDATE_UNRET_BEGIN to ANNOTATE (Joe Lawrence) [RHEL-114921]
  - objtool: Convert instrumentation_{begin,end}() to ANNOTATE (Joe Lawrence) [RHEL-114921]
  - objtool: Convert ANNOTATE_RETPOLINE_SAFE to ANNOTATE (Joe Lawrence) [RHEL-114921]
  - objtool: Convert ANNOTATE_NOENDBR to ANNOTATE (Joe Lawrence) [RHEL-114921]
  - objtool: Generic annotation infrastructure (Joe Lawrence) [RHEL-114921]
  - objtool: Fix unreachable instruction warnings for weak functions (Joe Lawrence) [RHEL-114921]
  - objtool: Exclude __tracepoints data from ENDBR checks (Joe Lawrence) [RHEL-114921]
  - objtool: Also include tools/include/uapi (Joe Lawrence) [RHEL-114921]
  - objtool: Detect non-relocated text references (Joe Lawrence) [RHEL-114921]
  - compiler.h: specify correct attribute for .rodata..c_jump_table (Joe Lawrence) [RHEL-114921]
  - objtool: Handle frame pointer related instructions (Joe Lawrence) [RHEL-114921]
  - objtool/rust: list `noreturn` Rust functions (Joe Lawrence) [RHEL-114921]
  - objtool/x86: objtool can confuse memory and stack access (Joe Lawrence) [RHEL-114921]
  - objtool: Use "action" in error message to be consistent with help (Joe Lawrence) [RHEL-114921]
  - lkdtm: Disable CFI checking for perms functions (Joe Lawrence) [RHEL-114921]
  - objtool: Fix compile failure when using the x32 compiler (Joe Lawrence) [RHEL-114921]
  - objtool: Check local label in read_unwind_hints() (Joe Lawrence) [RHEL-114921]
  - objtool: Check local label in add_dead_ends() (Joe Lawrence) [RHEL-114921]
  - objtool/LoongArch: Enable orc to be built (Joe Lawrence) [RHEL-114921]
  - objtool/x86: Separate arch-specific and generic parts (Joe Lawrence) [RHEL-114921]
  - objtool/LoongArch: Implement instruction decoder (Joe Lawrence) [RHEL-114921]
  - objtool/LoongArch: Enable objtool to be built (Joe Lawrence) [RHEL-114921]
  - init: remove obsolete arch_call_rest_init() wrapper (Joe Lawrence) [RHEL-114921]
  - objtool: Fix UNWIND_HINT_{SAVE,RESTORE} across basic blocks (Joe Lawrence) [RHEL-114921]
  - x86/objtool: Teach objtool about ERET[US] (Joe Lawrence) [RHEL-114921]
  - objtool: Fix calloc call for new -Walloc-size (Joe Lawrence) [RHEL-114921]
  - objtool: Remove max symbol name length limitation (Joe Lawrence) [RHEL-114921]
  - objtool: Propagate early errors (Joe Lawrence) [RHEL-114921]
  - objtool: Use 'the fallthrough' pseudo-keyword (Joe Lawrence) [RHEL-114921]
  - objtool: Add bcachefs noreturns (Joe Lawrence) [RHEL-114921]
  - objtool: Fix _THIS_IP_ detection for cold functions (Joe Lawrence) [RHEL-114921]
  - objtool: initialize all of struct elf (Joe Lawrence) [RHEL-114921]
  - objtool: Skip reading DWARF section data (Joe Lawrence) [RHEL-114921]
  - objtool: Free insns when done (Joe Lawrence) [RHEL-114921]
  - objtool: Get rid of reloc->rel[a] (Joe Lawrence) [RHEL-114921]
  - objtool: Shrink elf hash nodes (Joe Lawrence) [RHEL-114921]
  - objtool: Shrink reloc->sym_reloc_entry (Joe Lawrence) [RHEL-114921]
  - objtool: Get rid of reloc->jump_table_start (Joe Lawrence) [RHEL-114921]
  - objtool: Get rid of reloc->addend (Joe Lawrence) [RHEL-114921]
  - objtool: Get rid of reloc->type (Joe Lawrence) [RHEL-114921]
  - objtool: Get rid of reloc->offset (Joe Lawrence) [RHEL-114921]
  - objtool: Get rid of reloc->idx (Joe Lawrence) [RHEL-114921]
  - objtool: Get rid of reloc->list (Joe Lawrence) [RHEL-114921]
  - objtool: Allocate relocs in advance for new rela sections (Joe Lawrence) [RHEL-114921]
  - objtool: Add for_each_reloc() (Joe Lawrence) [RHEL-114921]
  - objtool: Don't free memory in elf_close() (Joe Lawrence) [RHEL-114921]
  - objtool: Keep GElf_Rel[a] structs synced (Joe Lawrence) [RHEL-114921]
  - objtool: Add elf_create_section_pair() (Joe Lawrence) [RHEL-114921]
  - objtool: Add mark_sec_changed() (Joe Lawrence) [RHEL-114921]
  - objtool: Fix reloc_hash size (Joe Lawrence) [RHEL-114921]
  - objtool: Consolidate rel/rela handling (Joe Lawrence) [RHEL-114921]
  - objtool: Improve reloc naming (Joe Lawrence) [RHEL-114921]
  - objtool: Remove flags argument from elf_create_section() (Joe Lawrence) [RHEL-114921]
  - objtool: Tidy elf.h (Joe Lawrence) [RHEL-114921]
  - Revert "x86/orc: Make it callthunk aware" (Joe Lawrence) [RHEL-114921]
  - tools: Remove unnecessary variables (Joe Lawrence) [RHEL-114921]
  - objtool: Move noreturn function list to separate file (Joe Lawrence) [RHEL-114921]
  - tools/lib/subcmd: Replace NORETURN usage with __noreturn (Joe Lawrence) [RHEL-114921]
  - objtool: Remove superfluous global_noreturns entries (Joe Lawrence) [RHEL-114921]
  - objtool: Ignore exc_double_fault() __noreturn warnings (Joe Lawrence) [RHEL-114921]
  - objtool: Detect missing __noreturn annotations (Joe Lawrence) [RHEL-114921]
  - objtool: Include backtrace in verbose mode (Joe Lawrence) [RHEL-114921]
  - objtool: Add verbose option for disassembling affected functions (Joe Lawrence) [RHEL-114921]
  - objtool: Limit unreachable warnings to once per function (Joe Lawrence) [RHEL-114921]
  - objtool: Generate ORC data for __pfx code (Joe Lawrence) [RHEL-114921]
  - objtool: Separate prefix code from stack validation code (Joe Lawrence) [RHEL-114921]
  - objtool: Remove superfluous dead_end_function() check (Joe Lawrence) [RHEL-114921]
  - objtool: Add symbol iteration helpers (Joe Lawrence) [RHEL-114921]
  - objtool: Add WARN_INSN() (Joe Lawrence) [RHEL-114921]
  - scripts/objdump-func: Support multiple functions (Joe Lawrence) [RHEL-114921]
  - objtool: Add stackleak instrumentation to uaccess safe list (Joe Lawrence) [RHEL-114921]
  - Revert "objtool: Support addition to set CFA base" (Joe Lawrence) [RHEL-114921]
  - sched: Fix KCSAN noinstr violation (Joe Lawrence) [RHEL-114921]
  - sched/idle: Mark arch_cpu_idle_dead() __noreturn (Joe Lawrence) [RHEL-114921]
  - sched/idle: Make sure weak version of arch_cpu_idle_dead() doesn't return (Joe Lawrence) [RHEL-114921]
  - xtensa/cpu: Mark cpu_die() __noreturn (Joe Lawrence) [RHEL-114921]
  - xtensa/cpu: Make sure cpu_die() doesn't return (Joe Lawrence) [RHEL-114921]
  - sparc/cpu: Mark cpu_play_dead() __noreturn (Joe Lawrence) [RHEL-114921]
  - sh/cpu: Expose arch_cpu_idle_dead()'s prototype definition (Joe Lawrence) [RHEL-114921]
  - sh/cpu: Mark play_dead() __noreturn (Joe Lawrence) [RHEL-114921]
  - sh/cpu: Make sure play_dead() doesn't return (Joe Lawrence) [RHEL-114921]
  - powerpc/cpu: Mark start_secondary_resume() __noreturn (Joe Lawrence) [RHEL-114921]
  - mips/cpu: Mark play_dead() __noreturn (Joe Lawrence) [RHEL-114921]
  - mips/cpu: Make sure play_dead() doesn't return (Joe Lawrence) [RHEL-114921]
  - arm64/cpu: Mark cpu_die() __noreturn (Joe Lawrence) [RHEL-114921]
  - arm/cpu: Add unreachable() to arch_cpu_idle_dead() (Joe Lawrence) [RHEL-114921]
  - objtool: Remove instruction::list (Joe Lawrence) [RHEL-114921]
  - objtool: Fix overlapping alternatives (Joe Lawrence) [RHEL-114921]
  - objtool: Remove instruction::reloc (Joe Lawrence) [RHEL-114921]
  - objtool: Shrink instruction::{type,visited} (Joe Lawrence) [RHEL-114921]
  - objtool: Make instruction::alts a single-linked list (Joe Lawrence) [RHEL-114921]
  - objtool: Make instruction::stack_ops a single-linked list (Joe Lawrence) [RHEL-114921]
  - objtool: Change arch_decode_instruction() signature (Joe Lawrence) [RHEL-114921]
  - objtool: Tolerate STT_NOTYPE symbols at end of section (Joe Lawrence) [RHEL-114921]
  - objtool: Optimize layout of struct special_alt (Joe Lawrence) [RHEL-114921]
  - objtool: Optimize layout of struct symbol (Joe Lawrence) [RHEL-114921]
  - objtool: Allocate multiple structures with calloc() (Joe Lawrence) [RHEL-114921]
  - objtool: Make struct check_options static (Joe Lawrence) [RHEL-114921]
  - objtool: Make struct entries[] static and const (Joe Lawrence) [RHEL-114921]
  - objtool: Fix HOSTCC flag usage (Joe Lawrence) [RHEL-114921]
  - objtool: Properly support make V=1 (Joe Lawrence) [RHEL-114921]
  - objtool: Install libsubcmd in build (Joe Lawrence) [RHEL-114921]
  - objtool: Check that module init/exit function is an indirect call target (Joe Lawrence) [RHEL-114921]
  - objtool: Fix memory leak in create_static_call_sections() (Joe Lawrence) [RHEL-114921] {CVE-2023-53423}
  - objtool/powerpc: Implement arch_pc_relative_reloc() (Joe Lawrence) [RHEL-114921]
  - objtool/powerpc: Add --mcount specific implementation (partial) (Joe Lawrence) [RHEL-114921]
  - objtool/powerpc: Enable objtool to be built on ppc (partial) (Joe Lawrence) [RHEL-114921]
  - objtool: Add arch specific function arch_ftrace_match() (Joe Lawrence) [RHEL-114921]
  - objtool: Use macros to define arch specific reloc types (Joe Lawrence) [RHEL-114921]
  - objtool: Read special sections with alts only when specific options are selected (Joe Lawrence) [RHEL-114921]
  - objtool: Use target file class size instead of a compiled constant (Joe Lawrence) [RHEL-114921]
  - objtool: Use target file endianness instead of a compiled constant (Joe Lawrence) [RHEL-114921]
  - powerpc: Fix objtool unannotated intra-function call warnings (Joe Lawrence) [RHEL-114921]
  - objtool: Add --cfi to generate the .cfi_sites section (Joe Lawrence) [RHEL-114921]


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Tomas Halman <thalman@redhat.com> - 2.7.0-12
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Petr Stodulka <pstodulk@redhat.com> - 0.20.0-2
changelog:
  - Bump leapp-framework to 6.2
  - Add possibility to specify aliases for CLI option
  - Resolves: RHEL-128269


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: Karolina Kula <kkula@redhat.com> - 0.22.0-3
changelog:
  - Fix parsing of the kernel cmdline
  - Require leapp data with provided_data_streams 4.0+
  - Respect the release_id of the OS when processing DNF repositories to apply correct mapping for CentOS Stream
  - Resolves: RHEL-80336


author: Karolina Kula <kkula@redhat.com> - 0.22.0-4
changelog:
  - Load DNF configuration correctly when using DNF libraries
  - Disable localpkg_gpgcheck during the upgrade if set to allow installation of bundled leapp and leapp-repository deps packages
  - Enable upgrades on systems using RHUI on AWS and Azure
  - Inhibit the upgrade if cgroups v1 are enabled on the system
  - The HybridImage model has been replaced by ConvertGrubenvTask
  - Check the input format of the target version properly
  - Resolves: RHEL-64910, RHEL-64911, RHEL-81212


author: Karolina Kula <kkula@redhat.com> - 0.23.0-1
changelog:
  - Rebase to new upstream 0.23.0
  - Enable in-place upgrades on CentOS Stream systems
  - Inhibit the upgrade on systems using deprecated network-legacy dracut module to prevent kernel panic
  - Introduce leapp-upgrade-el9toel10-fapolicyd subpackage with fapolicyd rules for in-place upgrades
  - Ignore Red Hat subscription-manager actions on non-RHEL distros
  - Add actors to migrate SSSD configuration
  - Update leapp upgrade data files
  - Resolves: RHEL-50847, RHEL-80333, RHEL-86226, RHEL-95975, RHEL-95982, RHEL-102591, RHEL-104389


author: Petr Stodulka <pstodulk@redhat.com> - 0.23.0-2
changelog:
  - Requires leapp-framework 6.2+
  - Modernize the storage initialization when booting to the upgrade environment
  - Fix the upgrade on s390x LPAR when rootfs is on LVM
  - Fix the detection of encrypted Ceph OSD containers
  - Fix unlocking of LUKS devices when applied on non-rootfs file systems
  - Detect potentially harmful third party python modules for the target python version
  - Handle correctly live kernel patching during IPU
  - Inhibit the upgrade if pluginpath is configured explicitly in DNF
  - Introduce `--target-os` option to specify target distribution for possible conversion during the upgrade
  - Introduce the `--target-version` alias for the `--target` option
  - Minor changes in logs and reports
  - Prevent sssdupdate actor from rising errors that could stop the upgrade
  - Respect repomapping on CentOS-like distributions
  - Respect repomapping when converting the system to different Linux distribution
  - Skip empty lines when parsing dumped DNF config to prevent confusing warning log
  - Update the leapp data files
  - Resolves: RHEL-76159, RHEL-95983, RHEL-108025, RHEL-108992, RHEL-110563, RHEL-119546


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-8
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113471 - "cannot seek on data source" in TLS lftp sessions


author: RHEL Packaging Agent <jotnar@redhat.com> - 1.8.12-1
changelog:
  - Rebase to version 1.8.12
  - Update license to MIT AND X11 (SPDX migration)
  - Change source format from .tar.bz2 to .tar.xz
  - Add libtool as BuildRequires
  - Remove CVE patches (now included upstream)
  - Add patch to lower autoconf requirement to 2.69
  - Update dont-forward-keycode-0.patch for new codebase
  - Remove NEWS from %doc (file not present in 1.8.12)
  - Resolves: RHEL-111537


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.19.3-6
changelog:
  - Add support for the Wacom Intuos Pro (RHEL-105483)
  - Rename existing patches for better order clarity


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Jeff Moyer <jmoyer@redhat.com> - 2.12-1.el9
changelog:
  - Rebase to version 2.12.  Follow fedora and get rid of explicit %
    attr for library files
  - Resolves: RHEL-114115


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-15693, RHEL-95397, RHEL-111609, RHEL-116847, RHEL-117774


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-114003


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-6
changelog:
  - Add stylus definitions for the propen group (RHEL-122207)
  - Add tablet definitions for the latest Cintiqs (RHEL-122206)
  - Fix the overlap for button assignments in the SVG (RHEL-126355)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-2
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-72468)
  - add command to set external grandmaster properties (RHEL-90585)
  - refresh link status on faults (RHEL-56168)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> 34.9.27-1
changelog:
  - New lorax documentation - 34.9.27 (bcl) (bcl)
    Related: RHEL-83208
  - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl)
    Resolves: RHEL-83208
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl)
    Resolves: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> 34.9.28-1
changelog:
  - templates.d: Synchronize with lorax-templates-rhel (bcl)
    Related: RHEL-54712
    Resolves: RHEL-69019
  - lorax: Change default rootfs size to 4GiB (bcl)
    Resolves: RHEL-95360


author: Brian C. Lane <bcl@redhat.com> 34.9.29-1
changelog:
  - templates: Synchronize with lorax-templates-rhel (bcl) (bcl)
    Resolves: RHEL-54712
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus)
    Resolves: RHEL-100463
  - lorax.spec: Fix a wrong issue reference (bcl) (bcl)
    Related: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Brian C. Lane <bcl@redhat.com> - 9.7-1
changelog:
  - Bump release version to 9.7 (bcl)
    Related: RHEL-91930
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91930


author: Brian C. Lane <bcl@redhat.com> - 9.7-3
changelog:
  - live-install.tmpl: Fix broken single item tuple (bcl)
    Related: RHEL-108149
  - libvirt.tmpl: Fix use of xrange (bcl)
    Related: RHEL-108149
  - 80-rhel: Remove unused templates and config files (bcl)
    Resolves: RHEL-108149
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus)
    Resolves: RHEL-101453


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-5
changelog:
  - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-2
changelog:
  - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS
    Vulnerability (CVE-2025-47947)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-3
changelog:
  - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service
    Vulnerability (CVE-2025-48866)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-4
changelog:
  - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe
    to rotatelogs for SecAuditLog leading to frozen state during graceful restart


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.5-3
changelog:
  - Resolves: RHEL-80178 A form data, "鹿沼市御成橋"(a name of street/city
    in Japanese) is forbade by mod_security_crs-3.3.4-3.el8.noarch


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Olivier Fourdan <ofourdan@redhat.com> - 40.9-31
changelog:
  - Backport linux-dmabuf v4 support to restore hardware acceleration
    in Xwayland 24.1 with Mesa 25.2
    Resolves: RHEL-129832


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-25
changelog:
  - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log
    is not created when updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


