# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-2
changelog:
  - Support point-to-point IPSec tunnel (RHEL-20690)
  - Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
  - Support configuring IPSec mode with 'type' (RHEL-21554)


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-2
changelog:
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496]
  - Resolves: RHEL-109496
    ([Azure][WALA][RHEL-9] Missing man page)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572]
  - Resolves: RHEL-97572
    ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command)


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Attila Lakatos <alakatos@redhat.com> - 0.16-105
changelog:
  RHEL 9.7 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-109912


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.1-1
changelog:
  - network: disable NM autoconnections also when BOOTIF is used (rvykydal)
    Resolves: RHEL-78272
  - network: support inst.net.noautodefault option (rvykydal)
    Related: RHEL-78272
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83214
  - Support leavebootorder for bootupd (jkonecny)
    Resolves: RHEL-40897
  - bootupd: call bootupctl with --update-firmware (awilliam)
    Resolves: RHEL-40897


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.2-1
changelog:
  - Fix typo in systemd service (jstodola)
    Resolves: RHEL-78272
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: INSTALLER-4148
    Resolves: RHEL-21691
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-82694
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-82694


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Nick Clifton <nickc@redhat.com> - 12.96-1
changelog:
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105574)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Fail on RHEL or CentOS 10 because it's not supported
    Resolves: RHEL-67804
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-67807
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68374
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69311


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-92718


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.4-1
changelog:
  - test: use post quantum crypto for certs where available (#368)
  - fix: Fix templates/configure_ag.j2 for Ansible 2.19
    Resolves: RHEL-106149


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204510)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.7-1
changelog:
  - ansible-core 2.14.7 release (rhbz#2221820)
  - rebuild with python 3.9 (rhbz#2221820)
  - remove bundled packaging, pyparsing and resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.9-1
changelog:
  - ansible-core 2.14.9 release (rhbz#2232432)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104652
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92844
  - Provide compatibility for AAH naming
    Resolves: RHEL-94769
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-79820
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78636


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104652
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106558


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-22
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-67
changelog:
  - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)


author: Jakub Martisko <jamartis@redhat.com> - 3.9.0-13
changelog:
  - Add explicit requires to the devel subpackages
  - Note: the the cblas64 seems to be linked against the libblas (not the 64 version)
  - this is not a regression, however in the Fedora it uses libblas64 instead.
  - Resolves: RHEL-5768


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-25
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74078
  - Include additional information in PartitioningError
    Resolves: RHEL-8005


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-26
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-8008
    Resolves: RHEL-8012


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Tom Stellard <tstellar@redhat.com> - 20.1.8-2
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-20
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-61224]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-61224]
  - Resolves: RHEL-61224
    (Configuring metric for default gateway is not working)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122]
  - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122]
  - Resolves: RHEL-71122
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] )


author: Jon Maloy <jmaloy@redhat.com> - 24.4-4
changelog:
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361]
  - Resolves: RHEL-76361
    ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-5
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703]
  - Resolves: RHEL-81703
    (DataSourceNoCloudNet network configuration is ineffective - c9s)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-6
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658]
  - Resolves: RHEL-88658
    (Cloud-Init Backport Optimization Features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615]
  - Fix missing patch [RHEL-101692]
  - Resolves: RHEL-100615
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7])
  - Resolves: RHEL-101692
    (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors")


author: Bob Mader <bob@redhat.com> - 0.1.7-2
changelog:
  - Initial build for EL9
  - Applying changes for gating - adding the .fmf directory
  - Resolves: RHEL-57044


author: Packit <hello@packit.dev> - 332-1
changelog:
  - The "shareable" attribute of disks is no longer modified by Cockpit
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 344-1
changelog:
  - Apply MSVSphere patches:
    * 0001-Added-support-GOST-and-PAM-GOST-profiles-for-crypto-.patch
    * 0002-Adds-MSVSphere-branding-directory.patch
    * 0003-Show-MSVSPHERE_PRETTY_NAME-instead-of-NAME-on-login-.patch
    * 0004-Show-MSVSPHERE_PRETTY_NAME-instead-of-NAME-for-docum.patch
    * 0005-Include-pkg-shell-module-translations-in-other-modul.patch
    * 0006-Show-MSVSPHERE_PRETTY_NAME-instead-of-PRETTY_NAME-in.patch
    * 0007-Disable-upstream-documentation-links.patch
    * 0008-Update-Russian-translation.patch
    * 0009-Change-chpasswd-to-passwd-to-support-PAM-crypto-algo.patch
    * 0010-Realmd-added-fully-qualified-names-option.patch
  - Added R: openssl-gost-engine


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Rodolfo Olivieri <rolivier@redhat.com> 0.1.0
changelog:
  - Initial release of Command Line Assistant
  - Rework config file handler and history
  - Remove leftover yaml import from utils
  - Fix config and history wrong paths
  - Add option to disable SSL verification on backend
  - Drop builds for EPEL 8
  - Remove leftover yaml config file
  - Refactor to use dataclasses instead of namedtuple
  - Improve logging
  - Transform dict to schema config
  - Append stdin to the user query
  - Convert the config class to be a dataclass
  - Remove use of slots in dataclasses


author: Rodolfo Olivieri <rolivier@redhat.com> 0.2.0
changelog:
  - Add String size limit to SQLAlchemy models
  - Add workaround for SQLite UUID types
  - Update packaging to include selinux custom policy
  - Fix returncode when running commands
  - Refactor the CLI to be separate commands
  - Add an experimental rendering module for client
  - Add Command Line Assistant Daemon
  - Update specfile to include config from release dir
  - Split the query and history dbus implementations
  - Switch to system bus instead of session bus
  - Add schema for input/output queries and history
  - The connect_signals was triggered the API request twice
  - Add local history management and improve the command
  - Query against rlsrag
  - Improve error handling
  - Update systemd units to be socket activated
  - Add 100% docstring coverage
  - Fix query read from stdin
  - Remove colorama dep
  - Apply NO_COLOR to colored output
  - Generate manpages for CLA and CLAD
  - Prevent binary stdin
  - Add audit logging capability to CLAD
  - Add exception handling for SSL certificates
  - Normalize the folder name to command-line-assistant
  - Small code refactor for outputting text
  - Update legal message
  - Remove record command
  - Fix config.toml for release and devel
  - Add audit logging to stdout
  - Add filter history option
  - Implement a basic user session management
  - Add input field for query by
  - Migrate JSON history cache to database solution
  - Fix ordering from history results
  - Add user_id to history tables.
  - Update manpages for RH1


author: Rodolfo Olivieri <rolivier@redhat.com> 0.3.0
changelog:
  - Update markdown text from "Suggestion" to "Snippet"
  - Add small feedback command
  - Fix created_at dates for history and chat
  - Rework to start sending context alongside question
  - Add proxy setting for config.toml
  - Rename all instances of public "query" to "chat"
  - Add Chat sessions
  - Add simple and interactive chat session
  - Minor improvements to spinner
  - Disable default audit loggers
  - Rework audit logging system
  - Add a new shell command to handle integrations
  - Fix typoos for CLAD man page documentation
  - Increase systemd timeout seconds
  - Fix logging and audit
  - Capture terminal output
  - Remove unused output config and code handler
  - Reverse order of the terminal output reader
  - Rename interactive bash function
  - Fix typing_extension and name change for chat command
  - Add raw mode for queries
  - Add error handling for history command
  - Fix selinux policy configs
  - Fix files and folders permissions when installing the RPM
  - Add ability to load credentials from systemd
  - Remove default value for with-output
  - Improve error message for missing history
  - Fix none values in stdin and query_string
  - Fix typo in interactive session message
  - Change permissions for xdg and lib folder for cla
  - Fix search ordering in last output function
  - Add KeyboardInterrupt exception catch to top-level call
  - Limit down the size of message that will be sent to the backend
  - Add message when the history is not enabled in the config file
  - Add markdown renderer for chat and history
  - Update links to use RHEL bug tracker
  - Fix terminal line wrapping when in terminal capture mode
  - Add null-character as prefix in logs to make parsing easier
  - Update markdown text from "Suggestion" to "Snippet"
  - Fixed created_at dates for chat and history
  - Introduce a simple feedback mechanis,


author: Rodolfo Olivieri <rolivier@redhat.com> 0.3.1
changelog:
  - Add exception handling for RuntimeError
  - Disallow empty query arguments for query_string and stdin
  - Simpify cert loading
  - Fix dbus permissions for clad
  - Prevent one character input from query_string and stdin
  - Improve CLAD systemd unit security
  - Add explanation for --description in chat command
  - Add a --from-chat switch to history to filter out conversation
  - Specify pymysql in the mysql connection string
  - Fix incorrect key on database schema
  - Add cla binary and a symlink for c
  - Fix inconsistency in reading the terminal output
  - Fix typos in legal and feedback message


author: Rodolfo Olivieri <rolivier@redhat.com> 0.4.0
changelog:
  - Refactor error codes
  - Add support for plain, simple output
  - Add tmpfs SELinux domain
  - Add check in clear(-all) to check if there is any chat to clean
  - Update colors in MarkdownRenderer to make the text more visible
  - Apply fixes to commands description and manpage in general
  - Fix legal message not showing up on each session
  - Prevent --with-output without terminal capture
  - Fix chat description and name defaults
  - Default to --all in history command
  - Fix unprocessable entity request for inference
  - Warn if .bashrc.d missing
  - Honor the http_proxy environment variables


author: Link Dupont <link@redhat.com> - 0.4.1
changelog:
  - Add horizontal lines back
  - Limit permission for history database to own user
  - Fix interactive mode regression
  - Fix legal message regression found in 0.4
  - Print help message in case of command has no arguments (RHEL-93272)
  - Fix CommandContext to get user ID correctly by changing from os.getegid() to os.geteuid()
  - Allow to pass terminal output without question or stdin
  - Add missing line for %files in rpmbuild
  - Add horizontal line after spinner message
  - Fix terminal width handling in TextWrapDecorator (RHEL-95741)
  - Fix regression for c history


author: Link Dupont <link@redhat.com> - 0.4.2
changelog:
  - Migrate from poetry to uv
  - Fix typo in warning message for total input size
  - Catch OSError being thrown by submit method (RHEL-102629)


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Jindrich Novy <jnovy@redhat.com> - 3:2.232.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.232.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.233.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.233.0
  - Resolves: RHEL-58997


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 3:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80816


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-131
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-8.el9
  - Related: RHEL-80816


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Jindrich Novy <jnovy@redhat.com> - 1.23.1-1
changelog:
  - update to https://github.com/containers/crun/releases/tag/1.23.1
  - fixes "Bump crun to 1.23.1 in RHEL 9.6"
  - Resolves: RHEL-110662


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.2.3.3op2-33.1
changelog:
  - RHEL-113077 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Mark Wielaard <mjw@redhat.com> - 5.0-8
changelog:
  - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch
  - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch


author: Mark Wielaard <mjw@redhat.com> - 5.0-11
changelog:
  - Add 0001-Add-basic-find-debuginfo-script-tests.patch
  - Add debugedit-5.0-find-debuginfo-tests-fixups.patch


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Evan Goode <egoode@redhat.com> - 4.14.0-30
changelog:
  - Mark transient transactions in DNF history (RHEL-84512)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84499)


author: Evan Goode <egoode@redhat.com> - 4.14.0-31
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-65817)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Pavel Valena <pvalena@redhat.com> - 057-101.git20250808
changelog:
  - fix(systemd): add missing modprobe@.service
  - fix: let check_vol_slaves_all return 1 when checks on all
  - improvement(74nvmf): lookup required NIC kernel modules for
  - fix(74nvmf): set root=nvmf
  - chore(multipath): remove `rd_NO_MULTIPATH` kernel command
  - refactor(multipath): remove custom multipathd.service
  - fix(systemd): systemd.volatile needs overlayfs kernel module
  - refactor(dracut): introduce clamp_mtimes helper function
  - fix(dracut): ensure hardlink deduplication is reproducible


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-8
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]
  - Resolves: RHEL-65725
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-3
changelog:
  - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865]
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019]
  - Resolves: RHEL-70865
    (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7])
  - Resolves: RHEL-83019
    (The newer revocation file and Server 2025 required to update it [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-4
changelog:
  - edk2-update-dbx-to-20250610.patch [RHEL-96869]
  - Resolves: RHEL-96869
    ([edk2,rhel-9] dbx update 20250610)


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.192-3
changelog:
  - Enable debuginfod IMA verification
  - Add elfutils-0.192-fix-configure-conditional.patch
  - Add elfutils-0.192-skip-ima-test.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-18
changelog:
  - Fix nsm-should-check for "google.com" failure (RHEL-94297)
  - Fix package tests for tetris no longer existing as a package (RHEL-94297)
  - Introduce untrusted-content variable (RHEL-94297)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 9.7.0 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-63090
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-59626
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-21871
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-30020
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-69136


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-87
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83255


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-88
changelog:
  - fence_compute/fence_evacuate: dont use deprecated inspect.getargspec()
    Resolves: RHEL-84448
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79798


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Eduard Basov <ebasov@msvsphere-os.ru> - 1.94.0-3.inferit
changelog:
  - Fix Service File for fingerprint core module
    Deleting the "PrivateNetwork" file from the service
    Adding to "DeviceAllow" /dev/focal_moh_spi


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83105


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.6-4
changelog:
  - Modernize and clean up the spec file
  - Make it harder to miss any .so version change
  - Properly install the license file
  - Remove an obsolete sed-patch
  - Move documentation and examples to a -doc subpackage
  - Build PDF instead of HTML documentation


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-9
changelog:
  - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
  - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Victor Evdokimov <viktor.evdokimov@softline.com> - 5.1.0-6.inferit
changelog:
  - Fixed the using null pointer in function set_breakpoint:
    using-null-pointer-in-set_breakpoint.patch
  - Fixed fd leak in function remap_std_file:
    not-closed-fd-in-remap_std_file.patch
  - Fixed fd leak in function do_readfile:
    not-closed-fd-in-do_readfile.patch
  - Fixed closing null file pointer in function do_writea:
    closed-null-file-pointer-in-do_writea.patch
  - Fixed using illegal array index in function value_info:
    illegal-array-index-in-value_info.patch


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 10.97-1
changelog:
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)


author: Nick Clifton <nickc@redhat.com> - 11.02-1
changelog:
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch.  This test
    should be covered by gdb.base/watchpoint-unaligned.exp which was
    added upstream in commit a3b60e4588606354b93508a0008a5.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Joan Torres <joantolo@redhat.com> - 40.1-31
changelog:
  - Fix legacy-xorg session switching
    The fix that intended to fix the issue wasn't complete and also,
    introduced a bug on user switching for non legacy-xorg servers.
    This fix addresses both issues.
  - Avoid waiting 10s when starting GDM in legacy-xorg mode
    Resolves: RHEL-72694


author: Joan Torres <joantolo@redhat.com> - 40.1-32
changelog:
  - Leave session-opened signature the same as before and use a new
    session-opened-with-session-id signal to keep ABI compatibility
    Related: RHEL-46383


author: Joan Torres <joantolo@redhat.com> - 40.1-35
changelog:
  - Instead of allowing adding custom parameters to Xorg,
    only allow adding -nocursor. Allowing adding custom parameters
    is a potential security issue.
    Related: RHEL-81194


author: Milan Crha <mcrha@redhat.com> - 2.6.0-8
changelog:
  - Backport Fedora change to provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format)
  - Resolves: RHEL-78739


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-16.2
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94290
  - Resolves: RHEL-102845


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Joan Torres <joantolo@redhat.com> - 40.1.1-11
changelog:
  - Add race fixes needed when terminating a conflicting session
    on GDM greeter.
    Resolves: RHEL-92341


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Joan Torres <joantolo@redhat.com> - 40.10-27
changelog:
  - session-opened signature is reverted to keep ABI compatibility,
    use session-opened-with-session-id instead
    Related: RHEL-92307


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: David Benoit <dbenoit@redhat.com> - 1.22.5-2
changelog:
  - Rebuild race detector archives from LLVM sources
  - Add golang-race subpackage
  - Resolves: RHEL-33421
  - Remove unused crypto/internal/boring/syso package
  - Resolves: RHEL-54335


author: Archana <aravinda@redhat.com> - 1.23.2-1
changelog:
  - Rebase to Go1.23.2
  - Remove fix standard crypto panic patch as the source already has changes
  - Resolves: RHEL-62392


author: Archana <aravinda@redhat.com> - 1.23.10-1
changelog:
  - Update to Go 1.23.10
  - Fix for CVE-2025-4673, CVE-2025-0913, and CVE-2025-22874
  - Resolves: RHEL-96000


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.15.5-3
changelog:
  - Moved greenboot config to /etc/grub.d.
  - %post symlink greenboot.cfg to bootupd if present
  - %postun remove symlink from bootupd if present


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Antonio Murdaca <antoniomurdaca@gmail.com> - 0.15.8-1
changelog:
  * ci: add ci test for pull request by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/164
   * ci: add more wait time for fallback by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/167
   * ci: fix ansible check failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/169
   * ci: add test case of bootc anaconda iso by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/171
   * test github token by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/174
   * update github action by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/177
   * Update greenboot-ci.yaml by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/179
   * ci: fix iso case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/173
   * ci: add support for fedora rawhide by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/181
   * ci: fix rahide failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/183
   * ci: fix podman retry issue by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/185
   * ci: add centos-stream-9 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/187
   * ci: add rhel 9.6 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/190
   * ci: fix rhel 9.6 anaconda case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/193
   * ci: fix secret error by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/195
   * specfile: Stop building on ix86 by @travier in https://github.com/fedora-iot/greenboot/pull/197
   * rollback: if no bootc, fallback to rpm-ostree by @runcom in https://github.com/fedora-iot/greenboot/pull/199
   * fix:fail early for any required script failure by @say-paul in https://github.com/fedora-iot/greenboot/pull/198
   * Release 0.15.8 by @runcom in https://github.com/fedora-iot/greenboot/pull/202

   * @travier made their first contribution in https://github.com/fedora-iot/greenboot/pull/197

   **Full Changelog**: https://github.com/fedora-iot/greenboot/compare/v0.15.7...v0.15.8
  - Resolves: RHEL-78244


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-4
changelog:
  - Add support for nbd+unix:// URIs
    resolves: RHEL-33956
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-36634


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56811
  - Replace Jansson with json-c
    resolves: RHEL-65294


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.4
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83036


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80816


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7
changelog:
  - Resolves: RHEL-99815 - stickysession field does not work when specifying
    it in the query parameter after upgrade to 9.5
  - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99968 - httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.43.20190303git
changelog:
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902]
  - Resolves: RHEL-9902
    ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.44.20190303git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812]
  - Resolves: RHEL-95812
    ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9)


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-14
changelog:
  - Resolves: RHEL-80345 Use new bind9.18-dyndb-ldap and bind9.18 only for DNS over TLS with the ipa-server-encrypted-dns package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-15
changelog:
  - Resolves: RHEL-84481 Protect all IPA service principals
  - Resolves: RHEL-84277 [RFE] IDM support UIDs up to 4,294,967,293
  - Resolves: RHEL-84276 Ipa client --raw --structured throws internal error
  - Resolves: RHEL-82707 Search size limit tooltip has Search time limit tooltip text
  - Resolves: RHEL-82089 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30658 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-88900 [RFE] Add check on CA cert expiry for ipa-cert-fix
  - Resolves: RHEL-88037 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86483 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-41178 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-95010 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93890 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-93887 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-93483 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-88834 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-19
changelog:
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89907 Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99315 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-98565 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96920 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-31907 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-20
changelog:
  - Resolves: RHEL-106285 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-106026 Include fixes in python3-ipatests package
  - Resolves: RHEL-105512 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101707 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-101544 ipa-client-encrypted-dns does not ensure bind-utils >= 9.18 for DoT-compatible nsupdate
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-3
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-73554
  - Related: RHEL-74302
  - Related: RHEL-73990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-2
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86967
  - Resolves: RHEL-86620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-3
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101648
  - Resolves: RHEL-102312
  - Resolves: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-119329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118767
  - Resolves: RHEL-119455


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.24.0.8-1
changelog:
  - Update to jdk-11.0.24+8 (GA)
  - Update release notes to 11.0.24+8
  - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes
  - Switch to GA mode for release
  - Fix Provides to reflect up to date component versions
  - Add zlib build required or bundled version (1.3.1), depending on system_libs setting
  - Resolves: RHEL-45202
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.6-0.2.ea
changelog:
  - Update to jdk-11.0.25+6 (EA)
  - Update release notes to 11.0.25+6
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Related: RHEL-58775


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.7-0.3.ea
changelog:
  - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml
  - RHJDKBP-874 - Removed 
  - Related: RHEL-58775


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.9-2
changelog:
  - Update to jdk-11.0.25+9 (GA)
  - Update release notes to 11.0.25+9
  - Switch to GA mode for release
  - Related: RHEL-58775
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.9-3
changelog:
  - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z
  - Resolves: RHEL-63042
  - See-Also: RHEL-63043
  - See-Also: RHEL-63044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.25.0.9-6
changelog:
  - Make java-11-openjdk the default JDK only on RHEL x86_32
  - Drop system timezone data dependency from base RHEL 11u builds
  - Resolves: RHEL-70599
  - See-Also: RHEL-70600
  - See-Also: RHEL-70601
  - Resolves: RHEL-71242
  - See-Also: RHEL-71243
  - See-Also: RHEL-71244


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.25.0.9-3
changelog:
  - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17
  - Disable copy-jdk-configs for Flatpak builds
  - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction
  - Resolves: RHEL-73880
  - See-Also: RHEL-73881
  - See-Also: RHEL-73882
  - See-Also: RHEL-73873


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90309


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-604.el9]
changelog:
  - net: e1000e: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-99399]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99399]
  - e1000e: change k1 configuration on MTP and later platforms (Corinna Vinschen) [RHEL-99399]
  - e1000e: Fix real-time violations on link up (Corinna Vinschen) [RHEL-99399]
  - e1000e: Link NAPI instances to queues and IRQs (Corinna Vinschen) [RHEL-99399]
  - e1000e: Remove duplicated writel() in e1000_configure_tx/rx() (Corinna Vinschen) [RHEL-99399]
  - net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103029] {CVE-2025-38124}
  - scsi: storvsc: Increase the timeouts to storvsc_timeout JIRA: https://issues.redhat.com/browse/RHEL-100669 (Dexuan Cui)
  - dpll: add phase_offset_monitor_get/set callback ops (Ivan Vecera) [RHEL-105066]
  - dpll: add phase-offset-monitor feature to netlink spec (Ivan Vecera) [RHEL-105066]
  - devlink: Add new "clock_id" generic device param (Ivan Vecera) [RHEL-105064]
  - devlink: Add support for u64 parameters (Ivan Vecera) [RHEL-105064]
  - netlink: specs: devlink: replace underscores with dashes in names (Ivan Vecera) [RHEL-105064]
  - devlink: Add new "enable_phc" generic device param (Ivan Vecera) [RHEL-105064]
  - netlink: fix policy dump for int with validation callback (Ivan Vecera) [RHEL-105064]
  - devlink: use DEVLINK_VAR_ATTR_TYPE_* instead of NLA_* in fmsg (Ivan Vecera) [RHEL-105064]
  - devlink: avoid param type value translations (Ivan Vecera) [RHEL-105064]
  - devlink: define enum for attr types of dynamic attributes (Ivan Vecera) [RHEL-105064]
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103260] {CVE-2025-38250}
  - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95607]
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103158] {CVE-2025-38159}
  - wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103222] {CVE-2025-38292}
  - bnxt_en: Flush FW trace before copying to the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: fix module unload sequence (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix ethtool -d byte order for 32-bit values (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix coredump logic to free allocated buffer (Shruti Parab) [RHEL-76568]
  - bnxt_en: delay pci_alloc_irq_vectors() in the AER path (Shruti Parab) [RHEL-76568]
  - bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix ethtool selftest output in one of the failure cases (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix error handling path in bnxt_init_chip() (Shruti Parab) [RHEL-76568]
  - bnxt_en: improve TX timestamping FIFO configuration (Shruti Parab) [RHEL-76568]
  - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code (Shruti Parab) [RHEL-76568]
  - bnxt_en: Remove unused macros in bnxt_ulp.h (Shruti Parab) [RHEL-76568]
  - bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp (Shruti Parab) [RHEL-76568]
  - bnxt_en: Report the ethtool coredump length after copying the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: Change FW message timeout warning (Shruti Parab) [RHEL-76568]
  - bnxt_en: Linearize TX SKB if the fragments exceed the max (Shruti Parab) [RHEL-76568]
  - bnxt_en: Mask the bd_cnt field in the TX BD properly (Shruti Parab) [RHEL-76568]
  - bnxt_en: add .set_module_eeprom_by_page() support (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_get_module_eeprom_by_page() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update firmware interface to 1.10.3.97 (Shruti Parab) [RHEL-76568]
  - bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add devlink support for ENABLE_ROCE nvm parameter (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_hwrm_nvm_req() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add support for a new ethtool dump flag 3 (Shruti Parab) [RHEL-76568]
  - bnxt_en: Extend queue stop/start for TX rings (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor TX ring free logic (Shruti Parab) [RHEL-76568]
  - bnxt_en: Reallocate RX completion ring for TPH support (Shruti Parab) [RHEL-76568]
  - bnxt_en: Pass NQ ID to the FW when allocating RX/RX AGG rings (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor RX/RX AGG ring parameters setup for P5_PLUS (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_free_tx_rings() to free per TX ring (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor completion ring free routine (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor TX ring allocation logic (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor completion ring allocation logic for P5_PLUS chips (Shruti Parab) [RHEL-76568]
  - bnxt_en: Set NPAR 1.2 support when registering with firmware (Shruti Parab) [RHEL-76568]
  - eth: bnxt: update header sizing defaults (Shruti Parab) [RHEL-76568]
  - eth: bnxt: allocate enough buffer space to meet HDS threshold (Shruti Parab) [RHEL-76568]
  - eth: bnxt: apply hds_thrs settings correctly (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for hds-thresh ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for tcp-data-split ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: add support for rx-copybreak ethtool command (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip reading PXP registers during ethtool -d if unsupported (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (Shruti Parab) [RHEL-76568]
  - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (Shruti Parab) [RHEL-76568]
  - bnxt_en: Do not allow ethtool -m on an untrusted VF (Shruti Parab) [RHEL-76568]
  - bnxt_en: Use FW defined resource limits for RoCE (Shruti Parab) [RHEL-76568]
  - bnxt_en: Fix potential crash when dumping FW log coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: handle tpa_info in queue API implementation (Shruti Parab) [RHEL-76568]
  - bnxt_en: refactor bnxt_alloc_rx_rings() to call bnxt_alloc_rx_agg_bmap() (Shruti Parab) [RHEL-76568]
  - bnxt_en: refactor tpa_info alloc/free into helpers (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add FW trace coredump segments to the coredump (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add a new ethtool -W dump flag (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add 2 parameters to bnxt_fill_coredump_seg_hdr() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add functions to copy host context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Do not free FW log context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Manage the FW trace context memory (Shruti Parab) [RHEL-76568]
  - bnxt_en: Allocate backing store memory for FW trace logs (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Refactor bnxt_free_ctx_mem() (Shruti Parab) [RHEL-76568]
  - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update firmware interface spec to 1.10.3.85 (Shruti Parab) [RHEL-76568]
  - bnxt_en: optimize gettimex64 (Shruti Parab) [RHEL-76568]
  - eth: bnxt: use page pool for head frags (Shruti Parab) [RHEL-76568]
  - bnxt_en: add unlocked version of bnxt_refclk_read (Shruti Parab) [RHEL-76568]
  - bnxt_en: replace PTP spinlock with seqlock (Shruti Parab) [RHEL-76568]
  - bnxt_en: cache only 24 bits of hw counter (Shruti Parab) [RHEL-76568]
  - bnxt_en: Update bnxt.rst devlink documentation (Shruti Parab) [RHEL-76568]
  - cpufreq: tegra: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix setting policy limits when frequency tables are used (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Limit resolving a frequency to policy min/max (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Avoid using inconsistent policy->min and policy->max (Mark Langsdorf) [RHEL-83803]
  - cpufreq: cppc: Fix invalid return value in .get() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: intel_pstate: Fix hwp_get_cpu_scaling() (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Enable ITMT support after initializing core rankings (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Init cpufreq only for present CPUs (Mark Langsdorf) [RHEL-83803]
  - cpufreq: tegra186: Share policy per cluster (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Fix min_limit perf and freq updation for performance governor (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop actions in amd_pstate_epp_cpu_offline() (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Stop caching EPP (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Rework CPPC enabling (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop debug statements for policy setting (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Update cppc_req_cached for shared mem EPP writes (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Move all EPP tracing into *_update_perf and *_set_epp functions (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Cache CPPC request in shared mem case too (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Replace all AMD_CPPC_* macros with masks (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Adjust variable scope (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Run on all of the correct CPUs (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Drop SUCCESS and FAIL enums (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Allow lowest nonlinear and lowest to be the same (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate-ut: Use _free macro to free put policy (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop `cppc_cap1_cached` (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Overhaul locking (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Move perf values into a union (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Drop min and max cached frequencies (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Show a warning when a CPU fails to setup (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Fix the clamping of perf values (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the unncecessary driver_lock in amd_pstate_update_limits (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the unnecessary cpufreq_update_policy call (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Modularize perf<->freq conversion (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Convert all perf values to u8 (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Pass min/max_limit_perf as min/max_perf to amd_pstate_update (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Remove the redundant des_perf clamping in adjust_perf (Mark Langsdorf) [RHEL-83803]
  - cpufreq/amd-pstate: Modify the min_perf calculation in adjust_perf callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Remove cpufreq_enable_boost_support() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: staticize policy_has_boost_freq() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: amd: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powernv: Set .set_boost directly (Mark Langsdorf) [RHEL-83803]
  - cpufreq: vexpress: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Stop checking for duplicate available/boost freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sc520_freq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: spear: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powernow: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pmac: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qoriq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: imx6q: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: davinci: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: kirkwood: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: p4: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: omap: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: e_powersaver: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: elanfreq: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pasemi: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: mediatek: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: acpi: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb: Stop setting common freq attributes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Always create freq-table related sysfs file (Mark Langsdorf) [RHEL-83803]
  - cpufreq: bmips: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: Stop setting cpufreq_driver->attr field (Mark Langsdorf) [RHEL-83803]
  - cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scpi: compare kHz instead of Hz (Mark Langsdorf) [RHEL-83803]
  - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Re-sync CPU boost state on system resume (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Restrict enabling boost on policies with no boost frequencies (Mark Langsdorf) [RHEL-83803]
  - cpufreq: cppc: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: acpi: Set policy->boost_supported (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Export cpufreq_boost_set_sw() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Introduce policy->boost_supported flag (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use str_enable_disable() helper (Mark Langsdorf) [RHEL-83803]
  - cpufreq: prevent NULL dereference in cpufreq_online() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Remove set_boost in acpi_cpufreq_cpu_init() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong max_freq in policy initialization (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Introduce a more generic way to set default per-policy boost flag (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix re-boost issue after hotplugging a CPU (Mark Langsdorf) [RHEL-83803]
  - cpufreq: s3c64xx: Fix compilation warning (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use str_enable_disable()-like helpers (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Fix max-frequency computation (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is not available (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Register for limit change notifications (Mark Langsdorf) [RHEL-83803]
  - cpufreq: maple: Remove maple driver (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Simplify MSR read on the boot CPU (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Fix cleanup path when boost enablement fails (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (Mark Langsdorf) [RHEL-83803]
  - Revert "cpufreq: brcmstb-avs-cpufreq: Fix initial command check" (Mark Langsdorf) [RHEL-83803]
  - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: add virtual-cpufreq driver (Mark Langsdorf) [RHEL-83803]
  - redhat/configs: Enabled CPUFREQ_VIRT (Mark Langsdorf) [RHEL-83803]
  - cpufreq: use proper units for frequency (Mark Langsdorf) [RHEL-83803]
  - cpufreq/cppc: Use NSEC_PER_MSEC for deadline task (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix the cacography in powernv-cpufreq.c (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix warning on unused of_device_id tables for !CONFIG_OF (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Drop CONFIG_ARM and CONFIG_ARM64 dependency on Arm drivers (Mark Langsdorf) [RHEL-83803]
  - cpufreq: omap: Drop asm includes (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom: Add explicit io.h include for readl/writel_relaxed (Mark Langsdorf) [RHEL-83803]
  - cpufreq: spear: Use of_property_for_each_u32() instead of open coding (Mark Langsdorf) [RHEL-83803]
  - redhat/configs: make ACPI_CPPC_CPUFREQ generic (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use of_property_present() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: powerpc: add missing MODULE_DESCRIPTION() macros (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sti: fix build warning (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Make cpufreq_driver->exit() return void (Mark Langsdorf) [RHEL-83803]
  - cpufreq: pcc: Remove empty exit() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: nforce2: Remove empty exit() callback (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ACPI: Mark boost policy as enabled when setting boost (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Allow drivers to advertise boost enabled (Mark Langsdorf) [RHEL-83803]
  - cpufreq: make cpufreq_boost_enabled() return bool (Mark Langsdorf) [RHEL-83803]
  - cpufreq: sti: add missing MODULE_DEVICE_TABLE entry for stih418 (Mark Langsdorf) [RHEL-83803]
  - cpufreq: simplify boolean parsing with kstrtobool in store function (Mark Langsdorf) [RHEL-83803]
  - cpufreq: update to sysfs_emit() for safer buffer handling (Mark Langsdorf) [RHEL-83803]
  - cpufreq/cppc: Don't compare desired_perf in target() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: fix memory leaks in probe error paths (Mark Langsdorf) [RHEL-83803]
  - cpufreq: scmi: Avoid overflow of target_freq in fast switch (Mark Langsdorf) [RHEL-83803]
  - cpufreq: qcom-nvmem: add support for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - soc: qcom: socinfo: Add SoC ID for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - dt-bindings: arm: qcom,ids: Add SoC ID for IPQ5321 (Mark Langsdorf) [RHEL-83803]
  - powerpc: rename SPRN_HID2 define to SPRN_HID2_750FX (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Fix up printing large CPU numbers and frequency values (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations (Mark Langsdorf) [RHEL-83803]
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: ti: Implement scope-based cleanup in ti_cpufreq_match_node() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: dt-platdev: Blocklist Allwinner H616/618 SoCs (Mark Langsdorf) [RHEL-83803]
  - cpupfreq: tegra124: eliminate uses of of_node_put() (Mark Langsdorf) [RHEL-83803]
  - cpufreq: Use a smaller freq for the policy->max when verify (Mark Langsdorf) [RHEL-83803]
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-92556]
  - x86/sev: Make sure pages are not skipped during kdump (Bandan Das) [RHEL-10019]
  - x86/sev: Do not touch VMSA pages during SNP guest memory kdump (Bandan Das) [RHEL-10019]
  - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-79685]
  - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-79685]
  - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-79685]
  - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-79685] {CVE-2025-38053}
  - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-79685 RHEL-93924]
  - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-79685]
  - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-66157 RHEL-79685 RHEL-82204]
  - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-79685 RHEL-93924] {CVE-2025-22065}
  - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-79685] {CVE-2025-22116}
  - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-79685] {CVE-2025-21890}
  - libeth: move idpf_rx_csum_decoded and idpf_rx_extracted (Michal Schmidt) [RHEL-79685]
  - idpf: record rx queue in skb for RSC packets (Michal Schmidt) [RHEL-79685]
  - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-79685]
  - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-79685]
  - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-79685 RHEL-82469] {CVE-2024-58057}
  - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-79685]
  - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-79685]
  - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-79685]
  - i2c: designware: add a new bit check for IC_CON control (John Allen) [RHEL-78660]
  - perf/x86/intel: Add Panther Lake support (Michael Petlan) [RHEL-47406 RHEL-47452]
  - perf/x86/intel: Add PMU support for Clearwater Forest (Michael Petlan) [RHEL-45093 RHEL-47454]
  - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106622] {CVE-2025-38380}
  - tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106083] {CVE-2025-38471}
  - ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-104380]
  - ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-104380]
  - ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-104380]
  - ice: wait before enabling TSPLL (Petr Oros) [RHEL-104380]
  - ice: add multiple TSPLL helpers (Petr Oros) [RHEL-104380]
  - ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-104380]
  - ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-104380]
  - ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-104380]
  - ice: add TSPLL log config helper (Petr Oros) [RHEL-104380]
  - ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-104380]
  - ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-104380]
  - ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-104380]
  - ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-104380]
  - ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-104380]
  - ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-104380]
  - ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-104380]
  - ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-104380]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-605.el9]
changelog:
  - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-91331]
  - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-91331]
  - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64457]
  - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64457]
  - mux: Add support for reading mux state from consumer DT node (Radu Rendec) [RHEL-105629]
  - mux: add support for delay after muxing (Radu Rendec) [RHEL-105629]
  - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-87983]
  - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-87983]
  - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-87983]
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-87983]
  - can: tcan4x5x: fix reset gpio usage during probe (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_close(): stop clocks after device has been shut down (Radu Rendec) [RHEL-90130]
  - can: m_can: Limit coalescing to peripheral instances (Radu Rendec) [RHEL-90130]
  - can: m_can: Reset cached active_interrupts on start (Radu Rendec) [RHEL-90130]
  - can: m_can: disable_all_interrupts, not clear active_interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Do not cancel timer from within timer (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove m_can_rx_peripheral indirection (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove coalesing disable in isr during suspend (Radu Rendec) [RHEL-90130]
  - can: m_can: Reset coalescing during suspend/resume (Radu Rendec) [RHEL-90130]
  - can: mcp251xfd: __mcp251xfd_get_berr_counter(): use CAN_BUS_OFF_THRESHOLD instead of open coding it (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_cmd_reset(): use cpu_to_le32() to assign mode (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Add support for Leaf v3 (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: support resuming from rx interrupt signal (Radu Rendec) [RHEL-90130]
  - can: m_can: allow keeping the transceiver running in suspend (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: Document the wakeup-source flag (Radu Rendec) [RHEL-90130]
  - can: m_can: remove redundant check for pm_clock_support (Radu Rendec) [RHEL-90130]
  - can: netlink: Fix TDCO calculation using the old data bittiming (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement transmit submission coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement BQL (Radu Rendec) [RHEL-90130]
  - can: m_can: Use tx_fifo_in_flight for netif_queue control (Radu Rendec) [RHEL-90130]
  - can: m_can: Introduce a tx_fifo_in_flight counter (Radu Rendec) [RHEL-90130]
  - can: m_can: Use the workqueue as queue (Radu Rendec) [RHEL-90130]
  - can: m_can: Cache tx putidx (Radu Rendec) [RHEL-90130]
  - can: m_can: Use u32 for putidx (Radu Rendec) [RHEL-90130]
  - can: m_can: Add tx coalescing ethtool support (Radu Rendec) [RHEL-90130]
  - can: m_can: Add rx coalescing ethtool support (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement transmit coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Implement receive coalescing (Radu Rendec) [RHEL-90130]
  - can: m_can: Write transmit header and data in one transaction (Radu Rendec) [RHEL-90130]
  - can: m_can: Move hrtimer init to m_can_class_register (Radu Rendec) [RHEL-90130]
  - can: m_can: Start/Cancel polling timer together with interrupts (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Fix id2_register for tcan4553 (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): move debug message and stats after successful restart (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): reverse logic to remove need for goto (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Radu Rendec) [RHEL-90130]
  - can: dev: can_restart(): don't crash kernel if carrier is OK (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: m_can: change from additional- to unevaluatedProperties (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Add error messages in probe (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Add support for tcan4552/4553 (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Rename ID registers to match datasheet (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Check size of mram configuration (Radu Rendec) [RHEL-90130]
  - can: tcan4x5x: Remove reserved register 0x814 from writable table (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: Add tcan4552 and tcan4553 variants (Radu Rendec) [RHEL-90130]
  - can: gs_usb: convert to NAPI/rx-offload to avoid OoO reception (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_disconnect(): remove not needed usb_kill_anchored_urbs() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_destroy_candev(): remove not needed usb_kill_anchored_urbs() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_close(): don't complain about failed device reset during ndo_stop (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_start_xmit(), gs_can_open(): clean up printouts in error path (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): make use of stats (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_receive_bulk_callback(): make use of netdev (Radu Rendec) [RHEL-90130]
  - can: gs_usb: uniformly use "parent" as variable name for struct gs_usb (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_set_timestamp(): remove return statements form void function (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_usb_probe(): align block comment (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove leading space from goto labels (Radu Rendec) [RHEL-90130]
  - can: Explicitly include correct DT includes, part 2 (Radu Rendec) [RHEL-90130]
  - can: peak_usb: remove unused/legacy peak_usb_netif_rx() function (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Radu Rendec) [RHEL-90130]
  - can: m_can: Add hrtimer to generate software interrupt (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Remove interrupt properties for MCAN (Radu Rendec) [RHEL-90130]
  - can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout (Radu Rendec) [RHEL-90130]
  - can: gs_usb: fix time stamp counter initialization (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): improve error handling (Radu Rendec) [RHEL-90130]
  - can: rx-offload: fix coding style (Radu Rendec) [RHEL-90130]
  - can: m_can: fix coding style (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Add len8_dlc support (Radu Rendec) [RHEL-90130]
  - can: m_can: Convert to platform remove callback returning void (Radu Rendec) [RHEL-90130]
  - can: dev: fix missing CAN XL support in can_put_echo_skb() (Radu Rendec) [RHEL-90130]
  - kvaser_usb: convert USB IDs to hexadecimal values (Radu Rendec) [RHEL-90130]
  - can: m_can: Keep interrupts enabled during peripheral read (Radu Rendec) [RHEL-90130]
  - can: m_can: Disable unused interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove double interrupt enable (Radu Rendec) [RHEL-90130]
  - can: m_can: Always acknowledge all interrupts (Radu Rendec) [RHEL-90130]
  - can: m_can: Remove repeated check for is_peripheral (Radu Rendec) [RHEL-90130]
  - can: bittiming: can_fixup_bittiming(): set effective tq (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove gs_can::iface (Radu Rendec) [RHEL-90130]
  - can: m_can: Add check for devm_clk_get (Radu Rendec) [RHEL-90130]
  - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (Radu Rendec) [RHEL-90130 RHEL-90138] {CVE-2022-49024}
  - can: kvaser_usb: Fix possible completions during init_completion (Radu Rendec) [RHEL-90130]
  - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Radu Rendec) [RHEL-90130]
  - can: m_can: use consistent indention (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add support for reading error counters (Radu Rendec) [RHEL-90130]
  - can: gs_usb: document GS_CAN_FEATURE_GET_STATE (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add ability to enable / disable berr reporting (Radu Rendec) [RHEL-90130]
  - can: gs_usb: document GS_CAN_FEATURE_BERR_REPORTING (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): merge setting of timestamp flags and init (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): sort checks for ctrlmode (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_can_open(): allow loopback and listen only at the same time (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_make_candev(): set netdev->dev_id (Radu Rendec) [RHEL-90130]
  - can: gs_usb: mention candleLight as supported device (Radu Rendec) [RHEL-90130]
  - can: m_can: m_can_handle_bus_errors(): add support for handling DLEC error on CAN-FD frames (Radu Rendec) [RHEL-90130]
  - can: m_can: is_lec_err(): clean up LEC error handling (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: Remove -Warray-bounds exception (Radu Rendec) [RHEL-90130]
  - can: gs_usb: remove dma allocations (Radu Rendec) [RHEL-90130]
  - can: gs_usb: add switchable termination support (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_make_candev(): clean up error handling (Radu Rendec) [RHEL-90130]
  - can: gs_usb: convert from usb_control_msg() to usb_control_msg_{send,recv}() (Radu Rendec) [RHEL-90130]
  - can: gs_usb: gs_cmd_reset(): rename variable holding struct gs_can pointer to dev (Radu Rendec) [RHEL-90130]
  - can: kvaser_usb: kvaser_usb_hydra: Use kzalloc for allocating only one element (Radu Rendec) [RHEL-90130]
  - can: rx-offload: can_rx_offload_init_queue(): fix typo (Radu Rendec) [RHEL-90130]
  - dt-binding: can: mcp251xfd: add binding information for mcp251863 (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: include common CAN controller bindings (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: fix indention of table in bosch,mram-cfg description (Radu Rendec) [RHEL-90130]
  - dt-binding: can: m_can: list Chandrasekar Ramakrishnan as maintainer (Radu Rendec) [RHEL-90130]
  - dt-binding: can: mcp251xfd: include common CAN controller bindings (Radu Rendec) [RHEL-90130]
  - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config (Radu Rendec) [RHEL-90130]
  - dt-bindings: can-controller: add support for termination-gpios (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Document power-domains property (Radu Rendec) [RHEL-90130]
  - dt-bindings: net: can: Document transceiver implementation as phy (Radu Rendec) [RHEL-90130]
  - KVM: x86: Reject KVM_SET_TSC_KHZ vCPU ioctl for TSC protected guest (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Ensure unused kvm_tdx_capabilities fields are zeroed out (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: Fix unexpected unindent warning (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Don't report base TDVMCALLs (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: Fix unexpected unindent warnings (Paolo Bonzini) [RHEL-95318]
  - KVM: selftests: Add back the missing check of MONITOR/MWAIT availability (Paolo Bonzini) [RHEL-95318]
  - KVM: x86: avoid underflow when scaling TSC frequency (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Report supported optional TDVMCALLs in TDX capabilities (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Exit to userspace for SetupEventNotifyInterrupt (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Exit to userspace for GetTdVmCallInfo (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Handle TDG.VP.VMCALL<GetQuote> (Paolo Bonzini) [RHEL-95318]
  - KVM: TDX: Add new TDVMCALL status code for unsupported subfuncs (Paolo Bonzini) [RHEL-95318]
  - KVM: x86/mmu: Reject direct bits in gpa passed to KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-95318]
  - KVM: x86/mmu: Embed direct bits into gpa for KVM_PRE_FAULT_MEMORY (Paolo Bonzini) [RHEL-95318]
  - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (Maxim Levitsky) [RHEL-95318]
  - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (Maxim Levitsky) [RHEL-95318]
  - KVM: TDX: Use kvm_arch_vcpu.host_debugctl to restore the host's DEBUGCTL (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: access_tracking_perf_test: Add option to skip the sanity check (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Extract guts of THP accessor to standalone sysfs helpers (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Add a nested (forced) emulation intercept test for x86 (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Actually emit forced emulation prefix for kvm_asm_safe_fep() (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Print out the actual Top-Down Slots count on failure (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Drop the "feature event" param from guest test helpers (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Remove dead code in Intel PMU counters test (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Only validate counts for hardware-supported arch events (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Make Intel arch events globally available in PMU counters test (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Use data load to trigger LLC references/misses in Intel PMU (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Fix typos in x86's PMU counter test's macro variable use (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Assert that STI blocking isn't set after event injection (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Print the seed for the guest pRNG iff it has changed (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Add global snapshot of kvm_is_forced_emulation_enabled() (Maxim Levitsky) [RHEL-95318]
  - KVM: selftests: Provide an API for getting a random bool from an RNG (Maxim Levitsky) [RHEL-95318]
  - rtmutex_api: provide correct extern functions (Maxim Levitsky) [RHEL-95318]
  - KVM: arm64: use kvm_trylock_all_vcpus when locking all vCPUs (Maxim Levitsky) [RHEL-95318]
  - x86: KVM: SVM: use kvm_lock_all_vcpus instead of a custom implementation (Maxim Levitsky) [RHEL-95318]
  - KVM: add kvm_lock_all_vcpus and kvm_trylock_all_vcpus (Maxim Levitsky) [RHEL-95318]
  - locking/mutex: implement mutex_lock_killable_nest_lock (Maxim Levitsky) [RHEL-95318]
  - locking/mutex: implement mutex_trylock_nested (Maxim Levitsky) [RHEL-95318]
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Add Idle HLT intercept support (Maxim Levitsky) [RHEL-95318]
  - x86/cpufeatures: Add CPUID feature bit for Idle HLT intercept (Maxim Levitsky) [RHEL-95318]
  - KVM: SEV: Use long-term pin when registering encrypted memory regions (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Synthesize nested VM-Exit for supported emulation intercepts (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Allow the caller to provide instruction length on nested VM-Exit (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Add a #define for the architectural max instruction length (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Plumb the emulator's starting RIP into nested intercept checks (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Plumb the src/dst operand types through to .check_intercept() (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Consolidate missing X86EMUL_INTERCEPTED logic in L2 emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Emulate HLT in L2 if it's not intercepted (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Allow emulating RDPID on behalf of L2 (Maxim Levitsky) [RHEL-95318]
  - KVM: nSVM: Pass next RIP, not current RIP, for nested VM-Exit on emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: Check PAUSE_EXITING, not BUS_LOCK_DETECTION, on PAUSE emulation (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/cpuid: add type suffix to decimal const 48 fix building warning (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Clear pv_unhalted on all transitions to KVM_MP_STATE_RUNNABLE (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Introduce kvm_set_mp_state() (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Wake vCPU for PIC interrupt injection iff a valid IRQ was found (Maxim Levitsky) [RHEL-95318]
  - KVM: x86/xen: Only write Xen hypercall page for guest writes to MSR (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Snapshot the host's DEBUGCTL in common x86 (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow (Maxim Levitsky) [RHEL-95318]
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU (Maxim Levitsky) [RHEL-95318]
  - KVM: Drop hack that "manually" informs lockdep of kvm->lock vs. vcpu->mutex (Maxim Levitsky) [RHEL-95318]
  - KVM: Don't BUG() the kernel if xa_insert() fails with -EBUSY (Maxim Levitsky) [RHEL-95318]
  - Revert "KVM: Fix vcpu_array[0] races" (Maxim Levitsky) [RHEL-95318]
  - KVM: Grab vcpu->mutex across installing the vCPU's fd and bumping online_vcpus (Maxim Levitsky) [RHEL-95318]
  - KVM: Verify there's at least one online vCPU when iterating over all vCPUs (Maxim Levitsky) [RHEL-95318]
  - KVM: SVM: Disable AVIC on SNP-enabled system without HvInUseWrAllowed feature (Maxim Levitsky) [RHEL-95318]
  - KVM: nVMX: fix canonical check of vmcs12 HOST_RIP (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: model canonical checks more precisely (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky) [RHEL-95318]
  - KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky) [RHEL-95318]
  - x86/tdx: mark tdh_vp_enter() as __flatten (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: use __always_inline for is_td_vcpu and is_td (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Revert kvm_x86_ops.mem_enc_ioctl() back to an OPTIONAL hook (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Use kvm_x86_call() instead of manual static_call() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Check that the high 32bits are clear in kvm_arch_vcpu_ioctl_run() (Paolo Bonzini) [RHEL-15711]
  - RHEL: add debugging info for TDX module initialization (Paolo Bonzini) [RHEL-15711]
  - Documentation/virt/kvm: Document on Trust Domain Extensions (TDX) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Make TDX VM type supported (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: KVM: TDX: Always honor guest PAT on TDX enabled guests (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: remove shadow_memtype_mask (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce supported_quirks to block disabling quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Allow vendor code to disable quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: do not allow re-enabling quirks (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enable guest access to MTRR MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a method to ignore hypercall patching (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Ignore setting up mce (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore accesses to TSC (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore VMX preemption timer (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add method to ignore guest instruction emulation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore accesses to CPU state (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<GetTdVmCallInfo> hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enable guest access to LMCE related MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV rdmsr/wrmsr hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement callbacks for MSR operations (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move KVM_MAX_MCE_BANKS to header file (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV HLT hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV CPUID hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Kick off vCPUs when SEAMCALL is busy during TD page removal (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Retry locally in TDX EPT violation handler on RET_PF_RETRY (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Detect unexpected SEPT violations due to pending SPTEs (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EPT violation/misconfig exit (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EXIT_REASON_OTHER_SMI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle EXCEPTION_NMI and EXTERNAL_INTERRUPT (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Add a helper for NMI handling (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move emulation_required to struct vcpu_vt (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add methods to ignore virtual apic related operation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Force APICv active for TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Enforce KVM_IRQCHIP_SPLIT for TDX guests (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Always block INIT/SIPI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle SMI request as !CONFIG_KVM_SMM (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement methods to inject NMI (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Wait lapic expire when timer IRQ was injected (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Assume timer IRQ was injected if APIC state is protected (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement non-NMI interrupt injection (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move posted interrupt delivery code to common header (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Disable PI wakeup for IPIv (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add support for find pending IRQ in a protected local APIC (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV MMIO hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDX PV port I/O hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<ReportFatalError> (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TDG.VP.VMCALL<MapGPA> (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle KVM hypercall with TDG.VP.VMCALL (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a place holder for handler of TDX hypercalls (TDG.VP.VMCALL) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add a place holder to handle TDX VM exit (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move pv_unhalted check out of kvm_vcpu_has_events() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Have ____kvm_emulate_hypercall() read the GPRs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a switch_db_regs flag to handle TDX's auto-switched behavior (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Save and restore IA32_DEBUGCTL (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Disable support for TSX and WAITPKG (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: restore user ret MSRs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Allow to update cached values in kvm_user_return_msrs w/o wrmsr (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: restore host xsave state when exit from the guest TD (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: vcpu_run: save/restore host state(host kernel gs) (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement TDX vcpu enter/exit path (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Move common fields of struct vcpu_{vmx,tdx} to a struct (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrapper to enter/exit TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle SEPT zap error due to page add error in premap (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Skip updating CPU dirty logging request for TDs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Make cpu_dirty_log_size a per-VM value (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add parameter "kvm" to kvm_mmu_page_ad_need_write_protect() (Paolo Bonzini) [RHEL-15711]
  - KVM: Add parameter "kvm" to kvm_cpu_dirty_log_size() and its callers (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle vCPU dissociation (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Finalize VM initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add an ioctl to create initial guest memory (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Export kvm_tdp_map_page() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Bail out kvm_tdp_map_page() when VM dead (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement hook to get max mapping level of private pages (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Implement hooks to propagate changes of TDP MMU mirror page table (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Handle TLB tracking for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Set per-VM shadow_mmio_value to 0 (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add setter for shadow_mmio_value (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Require TDP MMU, mmio caching and EPT A/D bits for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Set gfn_direct_bits to shared bit (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add load_mmu_pgd method for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add accessors VMX VMCS helpers (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Teach EPT violation helper about private mem (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Split out guts of EPT violation to common/exposed function (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Do not enable page track for TD guest (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Add a helper function to walk down the TDP MMU (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Implement memslot deletion for TDX (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TD measurement of initial contents (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to remove a TD private page (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to manage TDX TLB tracking (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers to add TD private pages (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrapper tdh_mem_sept_add() to add SEPT pages (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Register TDX host key IDs to cgroup misc controller (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Taking guest pa into consideration when calculate tdp level (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Introduce KVM_TDX_GET_CPUID (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Do TDX specific vcpu initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: create/free TDX vcpu structure (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Don't offline the last cpu of one package when there's TDX guest (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Make pmu_intel.c ignore guest TD case (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: add ioctl to initialize VM with TDX specific parameters (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: expose cpuid_entry2_find for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Support per-VM KVM_CAP_MAX_VCPUS extension check (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: create/destroy VM structure (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Get system-wide info about TDX module on initialization (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add place holder for TDX VM specific mem_enc_op ioctl (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add helper functions to print TDX SEAMCALL error (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add TDX "architectural" error codes (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Define TDX architectural definitions (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Add placeholders for TDX VM/vCPU structures (Paolo Bonzini) [RHEL-15711]
  - KVM: TDX: Get TDX global information (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Initialize TDX during KVM module load (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Refactor VMX module init/exit functions (Paolo Bonzini) [RHEL-15711]
  - KVM: Export hardware virtualization enabling/disabling functions (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add tdx_guest_keyid_alloc/free() to alloc and free TDX guest KeyID (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Read essential global metadata for KVM (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: allocate tdx_sys_info in static memory (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX flush operations (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX VM/vCPU field access (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX page cache management (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX vCPU creation (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX TD creation (Paolo Bonzini) [RHEL-15711]
  - x86/virt/tdx: Add SEAMCALL wrappers for TDX KeyID management (Paolo Bonzini) [RHEL-15711]
  - selftests: kvm: revamp MONITOR/MWAIT tests (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add infrastructure for secure TSC (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Push down setting vcpu.arch.user_set_tsc (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: move vm_destroy callback at end of kvm_arch_destroy_vm (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Prevent aliased memslot GFNs (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Don't zap valid mirror roots in kvm_tdp_mmu_zap_all() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take root types for kvm_tdp_mmu_invalidate_all_roots() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate tearing down mirror page tables (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate building mirror page tables (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Propagate attr_filter to MMU notifier callbacks (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Support mirror root for TDP MMU (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take root in tdp_mmu_for_each_pte() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Introduce KVM MMU root types to specify page table type (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Extract root invalid check from tdx_mmu_next_root() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Support GFN direct bits (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/tdp_mmu: Take struct kvm in iter loops (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Make kvm_tdp_mmu_alloc_root() return void (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add an is_mirror member for union kvm_mmu_page_role (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Add an external pointer to struct kvm_mmu_page (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a VM type define for TDX (Paolo Bonzini) [RHEL-15711]
  - KVM: Add member to struct kvm_gfn_range to indicate private/shared (Paolo Bonzini) [RHEL-15711]
  - x86/irq: Remove bitfields in posted interrupt descriptor (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Dedup fastpath MSR post-handling logic (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (Paolo Bonzini) [RHEL-15711]
  - KVM: nVMX: Process events on nested VM-Exit if injectable IRQ or NMI is pending (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Free vCPUs before freeing VM state (Paolo Bonzini) [RHEL-15711]
  - Documentation: KVM: update amd-memory-encryption.rst references (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Modify NMI and INTR handlers to take intr_info as function argument (Paolo Bonzini) [RHEL-15711]
  - KVM: VMX: Drop support for forcing UC memory when guest CR0.CD=1 (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Remove VMX support for virtualizing guest MTRR memtypes (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add fastpath handling of HLT VM-Exits (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Reorganize code in x86.c to co-locate vCPU blocking/running helpers (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Zap invalid roots with mmu_lock holding for write at uninit (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Refactor __kvm_emulate_hypercall() into a macro (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Always complete hypercall via function callback (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Bump hypercall stat prior to fully completing hypercall (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Move "emulate hypercall" function declarations to x86.h (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Add a helper to check for user interception of KVM hypercalls (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: clear vcpu->run->hypercall.ret before exiting for KVM_EXIT_HYPERCALL (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Remove hwapic_irr_update() from kvm_x86_ops (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: don't fall through case statements without annotations (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Only advertise KVM_CAP_READONLY_MEM when supported by VM (Paolo Bonzini) [RHEL-15711]
  - KVM: x86: Disallow read-only memslots for SEV-ES and SEV-SNP (and TDX) (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Return RET_PF* instead of 1 in kvm_mmu_page_fault() (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Treat TDP MMU faults as spurious if access is already allowed (Paolo Bonzini) [RHEL-15711]
  - KVM: x86/mmu: Don't overwrite shadow-present MMU SPTEs when prefaulting (Paolo Bonzini) [RHEL-15711]
  - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-104899]
  - xfs: do not check NEEDSREPAIR if ro,norecovery mount. (Pavel Reichl) [RHEL-101639]
  - iavf: fix reset_task for early reset event (Michal Schmidt) [RHEL-83572]
  - iavf: add support for Rx timestamps to hotpath (Michal Schmidt) [RHEL-83572]
  - iavf: handle set and get timestamps ops (Michal Schmidt) [RHEL-83572]
  - iavf: periodically cache PHC time (Michal Schmidt) [RHEL-83572]
  - iavf: add support for indirect access to PHC time (Michal Schmidt) [RHEL-83572]
  - iavf: add initial framework for registering PTP clock (Michal Schmidt) [RHEL-83572]
  - iavf: negotiate PTP capabilities (Michal Schmidt) [RHEL-83572]
  - iavf: Implement checking DD desc field (Michal Schmidt) [RHEL-83572]
  - iavf: refactor iavf_clean_rx_irq to support legacy and flex descriptors (Michal Schmidt) [RHEL-83572]
  - iavf: add support for negotiating flexible RXDID format (Michal Schmidt) [RHEL-83572]
  - iavf: define Rx descriptors as qwords (Michal Schmidt) [RHEL-83572]
  - iavf: allow changing VLAN state without calling PF (Michal Schmidt) [RHEL-83572]
  - iavf: Remove unused declarations (Michal Schmidt) [RHEL-83572]
  - iavf: add support to exchange qos capabilities (Michal Schmidt) [RHEL-83572]
  - iavf: Add net_shaper_ops support (Michal Schmidt) [RHEL-83572]
  - iavf: switch to Page Pool (Michal Schmidt) [RHEL-83572]
  - iavf: pack iavf_ring more efficiently (Michal Schmidt) [RHEL-83572]
  - iavf: drop page splitting and recycling (Michal Schmidt) [RHEL-83572]
  - block: use plug request list tail for one-shot backmerge attempt (Ming Lei) [RHEL-96295]
  - drm/nouveau/nvkm: introduce new GSP reply policy NVKM_GSP_RPC_REPLY_POLL (Robert Foss) [RHEL-91332]
  - drm/nouveau/nvkm: factor out current GSP RPC command policies (Robert Foss) [RHEL-91332]
  - redhat: add drm_atomic_state_test to mod-internal.list (Robert Foss) [RHEL-91332]
  - accel/ivpu: Don't convert symbol namespace to string literal (Robert Foss) [RHEL-91332]
  - xe: Don't select CONFIG_DRM_GPUSVM (Robert Foss) [RHEL-91332]
  - drm: xe: Include linux/nospec.h (Robert Foss) [RHEL-91332]
  - drm: Use old __assign_str function definition (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: Add cgroups implementation" (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux" (Robert Foss) [RHEL-91332]
  - Revert "drm/i915: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/amdgpu: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/amd/display: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - Revert "drm/sysfs: Constify 'struct bin_attribute'" (Robert Foss) [RHEL-91332]
  - drm: Move for_each_if() to util_macros.h for wider use (Robert Foss) [RHEL-91332]
  - redhat/configs: Add new configs from drm 6.15 backport (Robert Foss) [RHEL-91332]
  - Merge DRM changes from upstream v6.14..v6.15 (Robert Foss) [RHEL-91332]
  - udp: Fix memory accounting leak. (Xin Long) [RHEL-104094] {CVE-2025-22058}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-606.el9]
changelog:
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104271] {CVE-2025-38211}
  - NFS: Return the file btime in the statx results when appropriate (Benjamin Coddington) [RHEL-90990]
  - nfs: Add timecreate to nfs inode (Benjamin Coddington) [RHEL-90990]
  - Expand the type of nfs_fattr->valid (Benjamin Coddington) [RHEL-90990]
  - perf/x86/intel: Support RDPMC metrics clear mode (Michael Petlan) [RHEL-47448]
  - igc: fix lock order in igc_ptp_reset (Corinna Vinschen) [RHEL-83575]
  - igc: set the RX packet buffer size for TSN mode (Corinna Vinschen) [RHEL-83575]
  - igc: use FIELD_PREP and GENMASK for existing RX packet buffer size (Corinna Vinschen) [RHEL-83575]
  - igc: optimize TX packet buffer utilization for TSN mode (Corinna Vinschen) [RHEL-83575]
  - igc: use FIELD_PREP and GENMASK for existing TX packet buffer size (Corinna Vinschen) [RHEL-83575]
  - igc: rename I225_RXPBSIZE_DEFAULT and I225_TXPBSIZE_DEFAULT (Corinna Vinschen) [RHEL-83575]
  - igc: rename xdp_get_tx_ring() for non-xdp usage (Corinna Vinschen) [RHEL-83575]
  - igc: enable HW vlan tag insertion/stripping by default (Corinna Vinschen) [RHEL-83575]
  - igc: add lock preventing multiple simultaneous PTM transactions (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: cleanup PTP module if probe fails (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: handle the IGC_PTP_ENABLED flag correctly (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: move ktime snapshot into PTM retry loop (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: increase wait time before retrying PTM (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - igc: fix PTM cycle trigger logic (Corinna Vinschen) [RHEL-33242 RHEL-83575]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-83575]
  - igc: Fix XSK queue NAPI ID mapping (Corinna Vinschen) [RHEL-83575]
  - igc: Set buffer type for empty frames in igc_init_empty_frame (Corinna Vinschen) [RHEL-83575]
  - igc: Fix HW RX timestamp when passed by ZC XDP (Corinna Vinschen) [RHEL-83575]
  - igc: Avoid unnecessary link down event in XDP_SETUP_PROG process (Corinna Vinschen) [RHEL-83575]
  - igc: Link queues to NAPI instances (Corinna Vinschen) [RHEL-83575]
  - igc: Link IRQs to NAPI instances (Corinna Vinschen) [RHEL-83575]
  - igc: Fix passing 0 to ERR_PTR in igc_xdp_run_prog() (Corinna Vinschen) [RHEL-83575]
  - igc: Allow hot-swapping XDP program (Corinna Vinschen) [RHEL-83575]
  - igc: return early when failing to read EECD register (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_read/write_pcie_cap_reg (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_read/write_pci_cfg wrappers (Corinna Vinschen) [RHEL-83575]
  - igc: Remove unused igc_acquire/release_nvm (Corinna Vinschen) [RHEL-83575]
  - igc: remove autoneg parameter from igc_mac_info (Corinna Vinschen) [RHEL-83575]
  - igc: fix build errors for PTP (Corinna Vinschen) [RHEL-83575]
  - ixgbe: add support for FW rollback mode (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 implementation of FW recovery mode (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add FW API version check (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add support for devlink reload (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add device flash update via devlink (Corinna Vinschen) [RHEL-99401]
  - ixgbe: extend .info_get() with stored versions (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 functions getting PBA and FW ver info (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add .info_get extension specific for E610 devices (Corinna Vinschen) [RHEL-99401]
  - ixgbe: read the netlist version information (Corinna Vinschen) [RHEL-99401]
  - ixgbe: read the OROM version information (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add E610 functions for acquiring flash data (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add handler for devlink .info_get() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add initial devlink support (Corinna Vinschen) [RHEL-99401]
  - ixgbe: wrap netdev_priv() usage (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Fix unreachable retry logic in combined and byte I2C write functions (Corinna Vinschen) [RHEL-99401]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: fix media type detection for E610 device (Corinna Vinschen) [RHEL-86539 RHEL-99401]
  - ixgbe: add support for thermal sensor event reception (Corinna Vinschen) [RHEL-99401]
  - ixgbe: add PTP support for E610 device (Corinna Vinschen) [RHEL-99401]
  - ixgbe: fix media cage present detection for E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Fix possible skb NULL pointer dereference (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Fix passing 0 to ERR_PTR in ixgbevf_run_xdp() (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Fix passing 0 to ERR_PTR in ixgbe_run_xdp() (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Remove unused ixgbevf_hv_mbx_ops (Corinna Vinschen) [RHEL-99401]
  - ixgbevf: Add support for Intel(R) E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - PCI: Add PCI_VDEVICE_SUB helper macro (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Enable link management in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Clean up the E610 link management related code (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add ixgbe_x540 multiple header inclusion protection (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for EEPROM dump in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for NVM handling in E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add link management support for E610 device (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for E610 device capabilities detection (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Add support for E610 FW Admin Command Interface (Corinna Vinschen) [RHEL-80419 RHEL-99401]
  - ixgbe: Correct BASE-BX10 compliance code (Corinna Vinschen) [RHEL-99401]
  - ixgbe: downgrade logging of unsupported VF API version to debug (Corinna Vinschen) [RHEL-99401]
  - ixgbe: Break include dependency cycle (Corinna Vinschen) [RHEL-99401]
  - arch: x86: add IPC mailbox accessor function and add SoC register access (CKI Backport Bot) [RHEL-107008]
  - ASoC: SDCA: Allow read-only controls to be deferrable (Jaroslav Kysela) [RHEL-101627]
  - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Fixup some kernel doc errors (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Add missing default in switch in entity_pde_event() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SDCA: Update memory allocations to zero initialise (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix mute LED mask on HP OMEN 16 laptop (Jaroslav Kysela) [RHEL-101627]
  - sof-client-ipc-flood-test: don't mess with ->d_name (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA (Jaroslav Kysela) [RHEL-101627]
  - ALSA: compress_offload: tighten ioctl command number checks (Jaroslav Kysela) [RHEL-101627]
  - soundwire: Revert "soundwire: qcom: Add set_channel_map api support" (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38486}
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r0xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add quirks for some Clevo laptops (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 6 G1a (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: rt721-sdca: fix boost gain calculation error (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38438}
  - ASoC: Intel: sof-function-topology-lib: Print out the unsupported dmic count (Jaroslav Kysela) [RHEL-101627]
  - ASoC: fsl_sai: Force a software reset when starting in consumer mode (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fb2xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38454}
  - ASoC: cs35l56: probe() should fail if the device ID is not recognized (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: soc-acpi-intel-arl-match: set get_function_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: add sof_sdw_get_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: soc-acpi: add get_function_tplg_files ops (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select SND_SOC_ACPI_INTEL_MATCH (Jaroslav Kysela) [RHEL-101627]
  - ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: update quirk data for HP Victus (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic (Jaroslav Kysela) [RHEL-101627]
  - ALSA: sb: Force to disable DMAs once when DMA mode is changed (Jaroslav Kysela) [RHEL-101627]
  - ALSA: sb: Don't allow changing the DMA mode during operations (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38249}
  - ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38259}
  - ASoC: codec: wcd9335: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Add new pci id for AMD GPU display HD audio controller (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Ignore unsol events for cards being shut down (Jaroslav Kysela) [RHEL-101627]
  - ASoC: rt1320: fix speaker noise when volume bar is 100% (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: add check for status update registers (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: fix for clearing command status register (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: ps: fix for soundwire failures during hibernation exit sequence (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: serialize amd manager resume sequence during pm_prepare (Jaroslav Kysela) [RHEL-101627]
  - soundwire: amd: fix for handling slave alerts after link is down (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add quirk for Asus GU605C (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP Victus 15-fa1xxx (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tegra210_ahub: Add check to of_device_get_match_data() (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios laptops (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda/realtek: Add support for Acer Helios Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-101627]
  - ASoC: intel/sdw_utils: Assign initial value in asoc_sdw_rt_amp_spk_rtd_init() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd937x: Drop unused buck_supply (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: wcd9375: Fix double free of regulator supplies (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38423}
  - ASoC: amd: sof_amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: amd: amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-101627]
  - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Jaroslav Kysela) [RHEL-101627]
  - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (Jaroslav Kysela) [RHEL-101627]
  - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 (Jaroslav Kysela) [RHEL-101627]
  - ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Verify content returned by parse_int_array() (Jaroslav Kysela) [RHEL-101627] {CVE-2025-38307}
  - ASoC: Intel: avs: Relocate DSP status registers (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Read HW capabilities when possible (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Ignore Vendor-space manipulation for ACE (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Fix PPLCxFMT calculation (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: PCM operations for LNL-based platforms (Jaroslav Kysela) [RHEL-101627]
  - ALSA: hda: Allow to fetch hlink by ID (Jaroslav Kysela) [RHEL-101627]
  - soundwire: only compute port params in specific stream states (Jaroslav Kysela) [RHEL-101627]
  - ALSA: core: fix up bus match const issues. (Jaroslav Kysela) [RHEL-101627]
  - ASoC: apple: mca: Constrain channels according to TDM mask (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: amd: add missing acp descriptor field (Jaroslav Kysela) [RHEL-101627]
  - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2764: Enable main IRQs (Jaroslav Kysela) [RHEL-101627]
  - ASoC: tas2764: Reinit cache on part reset (Jaroslav Kysela) [RHEL-101627]
  - ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX (Jaroslav Kysela) [RHEL-101627]
  - ASoC: codecs: hda: Fix RPM usage count underflow (Jaroslav Kysela) [RHEL-101627]
  - ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108151] {CVE-2025-38417}
  - i40e: When removing VF MAC filters, only check PF-set MAC (Jamie Bainbridge) [RHEL-98540]
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107693]
  - cpuidle: Init cpuidle only for present CPUs (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Update documentation after get_typical_interval() changes (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Update documentation after previous changes (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Avoid discarding useful information (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Eliminate outliers on both ends of the sample set (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Tweak threshold use in get_typical_interval() (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Use one loop for average and variance computations (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Drop a redundant local variable (Mark Langsdorf) [RHEL-87863]
  - cpuidle: psci: Add trace for PSCI domain idle (Mark Langsdorf) [RHEL-87863]
  - cpuidle: psci: Activate GENPD_FLAG_ACTIVE_WAKEUP with OSI (Mark Langsdorf) [RHEL-87863]
  - powerpc/machdep: Drop include of dma-mapping.h (Mark Langsdorf) [RHEL-87863]
  - cpuidle: Correct some typos in comments (Mark Langsdorf) [RHEL-87863]
  - cpuidle: menu: Remove iowait influence (Mark Langsdorf) [RHEL-87863]
  - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (John Meneghini) [RHEL-41080]
  - net: add helpers for EEE configuration (CKI Backport Bot) [RHEL-107009]
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CKI Backport Bot) [RHEL-93557] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (CKI Backport Bot) [RHEL-93557] {CVE-2025-22121}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-607.el9]
changelog:
  - drm/vmwgfx: Fix guests running with TDX/SEV (Jocelyn Falempe) [RHEL-108036]
  - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Benjamin Coddington) [RHEL-99742]
  - Squashfs: sanity check symbolic link size (CKI Backport Bot) [RHEL-59303] {CVE-2024-46744}
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101247] {CVE-2025-38085}
  - mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101283] {CVE-2025-38084}
  - mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101283]
  - net/mlx5: Reset bw_share field when changing a node's parent (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - IB/mlx5: Fix potential deadlock in MR deregistration (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix number of lanes to UNKNOWN when using data_rate_oper (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-94893]
  - net/mlx5e: Disable MACsec offload for uplink representor profile (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-switch, Fix error handling for enabling roce (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TC, Continue the attr process even if encap entry is invalid (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Use custom tunnel header for vxlan gbp (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Move ttc allocation after switch case to prevent leaks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-37888}
  - RDMA/mlx5: Fix compilation warning when USER_ACCESS isn't set (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - treewide: Switch/rename to timer_delete[_sync]() (mlx5) (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Make reserved size independent of page size (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix calculation of total invalidated pages (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-22086}
  - RDMA/mlx5: Fix page_size variable overflow (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83386 RHEL-99321] {CVE-2025-22091}
  - RDMA/mlx5: Drop access_flags from _mlx5_mr_cache_alloc() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix cache entry update on dereg error (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix MR cache initialization error flow (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support optional-counters binding for QPs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Compile fs.c regardless of INFINIBAND_USER_ACCESS config (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Add optional counters for RDMA_TX/RX_packets/bytes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Expose RDMA TRANSPORT flow table types to userspace (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Check enabled UCAPs when creating ucontext (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Create UCAP char devices for supported device capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Reorder capability check last (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Start health poll after enable hca (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, reload representors on LAG creation failure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix ethtool -N flow-type ip4 to RSS context (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TC, Don't offload CT commit if it's the last action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Filter legacy rules that are unrelated to nic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Update pfnum retrieval for devlink port attributes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fw reset, check bridge accessibility at earlier stage (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Lag, use port selection tables when available (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: TX, Utilize WQ fragments edge for multi-packet WQEs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Always select CONFIG_PAGE_POOL_STATS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Use right API to free bitmap memory (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove NULL check before dev_{put, hold} (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Expose port reset cycle recovery counter via ethtool (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Get counter group size by FW capability (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Access PHY layer counter group as other counter groups (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Ensure each counter group uses its PCAM bit (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, log the unsupported mask in definer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, use list_move() instead of del/add (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove unused code for alias flow tables (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for setting parent of nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Preserve rate settings when creating a rate node (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce hierarchy level tracking on scheduling nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename devlink rate parent set function for leaf nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for dest flow sampler HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for flow meters HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add API for sharing HWS action by refcount (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add IFC bits for PPCNT recovery counters group (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add RDMA TRANSPORT steering domain support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Query ADV_RDMA capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Limit non-privileged commands (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Allow the throttle mechanism to be more dynamic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add RDMA_CTRL HW capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Avoid unnecessary use of comma operator (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Properly match IPsec subnet addresses (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Separate address related variables to be in struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Lag, Enable Multiport E-Switch offloads on 8 ports LAG (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Enable lanes configuration when auto-negotiation is off (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor link speed handling with mlx5_link_info struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Relocate function declarations from port.h to mlx5_core.h (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add trust lockdown error to health syndrome print function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Expose crr in health buffer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Log health buffer data on any syndrome (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Avoid report two health errors on same syndrome (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove newline at the end of a netlink error message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Avoid a hundred -Wflex-array-member-not-at-end warnings (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Change POOL_NEXT_SIZE define value and make it global (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add new health syndrome error and crr bit offset (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Symmetric OR-XOR RSS hash control (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Use secs_to_jiffies() instead of msecs_to_jiffies() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Support RX xfrm state selector's UPSPEC for packet offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add pass flow group for IPSec RX status table (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add num_reserved_entries param for ipsec_ft_create() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Skip IPSec RX policy check for crypto offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Move IPSec policy check after decryption (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Change the destination of IPSec RX SA miss rule (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add helper function to update IPSec default destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Separate extended link modes request from link modes type selection (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Change eth_proto parameter naming (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Introduce ptys2ethtool_process_link() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Refactor ptys2ethtool_adver_link() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Bridge, correct config option description (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add sensor name to temperature event message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Prefix temperature event bitmap with '0x' for clarity (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Apply rate-limiting to high temperature warning (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: XDP, Enable TX side XDP multi-buffer support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Expose RSS via devlink rx reporter diagnose (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Add direct TIRs to devlink rx reporter diagnose (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Move RQs diagnose to a dedicated function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Expose ICM consumption per function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename and move mlx5_esw_query_vport_vhca_id (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: set the tx_queue_len for pfifo_fast (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: reduce rep rxq depth to 256 for ECPF (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: reduce the max log mpwrq sz for ECPF and reps (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Remove unused mlx5e_tc_flow_action struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove stray semicolon in LAG port selection table creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Support FEC settings for 200G per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for 200Gbps per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add devcom component for the clock shared by functions (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-83168]
  - net/mlx5: Remove unused mlx5dr_domain_sync (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Bridge, fix the crash caused by LAG state check (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21970}
  - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, Rightsize bwc matcher priority (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, use the right action structs for STEv3 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: handle errors in mlx5_chains_create_table() (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21975}
  - net/mlx5: Fill out devlink dev info only for PFs (Benjamin Poirier) [RHEL-72226 RHEL-73517 RHEL-93397]
  - net/mlx5: IRQ, Fix null string in debug print (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Restore missing trace event when enabling vport QoS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix vport QoS cleanup on error (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21882}
  - RDMA/mlx5: Fix bind QP error cleanup flow (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix AH static rate parsing (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - IB/mlx5: Set and get correct qp_num for a DCT QP (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix the recovery flow of the UMR QP (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21892}
  - net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21717}
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21732}
  - RDMA/mlx5: Fix indirect mkey ODP page count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Fix link status down event for MPV (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Handle link status event only for LAG device (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Extend ODP statistics with operation count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fix unintentional sign extension on shift of dest_attr->vport.vhca_id (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Offload connections with hardware steering rules (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Make mlx5_ct_fs_smfs_ct_validate_flow_rule reusable (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: CT: Add initial support for Hardware Steering (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, rework the check if matcher size can be increased (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add nic_cap_reg and vhca_icm_ctrl registers (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: SHAMPO: Introduce new SHAMPO specific HCA caps (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Update mlx5_ifc to support FEC for 200G per lane link modes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, update flow - support through bigger action RTC (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, update flow - remove the use of dual RTCs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS to steering mode options (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS get capabilities (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, set create match definer to not supported by HWS (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add support for dest vport HWS action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS fte API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add dest table cache (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, manage flow counters HWS action sharing by refcount (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS modify header API function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS packet reformat API function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS actions pool (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS flow group API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS flow table API functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add HWS root namespace functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update TX ESN context for IPSec hardware offload (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: use do_aux_work for PHC overflow checks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, set timeout on polling for completion (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, support flow sampler destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, use the right size when writing arg data (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, handle returned error value in pool alloc (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21800}
  - net/mlx5: HWS, separate SQ that HWS uses from the usual traffic SQs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, num_of_rules counter on matcher should be atomic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, reduce memory consumption of a matcher struct (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove wrong deletion of the miss table list (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, change error flow on matcher disconnect (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21751}
  - net/mlx5: HWS, add error message on failure to move rules (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, simplify allocations as we support only FDB (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, denote how refcounts are protected (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove implementation of unused FW commands (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, remove the use of duplicated structs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, Add support for RDMA RX steering over IB link layer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove PTM support log message (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, add support for ConnectX-8 steering (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, expand SWS STE callbacks and consolidate common structs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, do not initialize native API queues (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, no need to expose mlx5hws_send_queues_open/close (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, retry insertion to hash table on EBUSY (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add mlx5_fs_pool API (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, add counter object to flow destination (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, Support LAG over Multi-Host NICs (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: LAG, Refactor lag logic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Report rx_discards_phy via rx_dropped (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add device cap abs_native_port_num (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Add ifc support for cross-esw scheduling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support for new scheduling elements (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add ConnectX-8 device to ifc (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: ifc: Reorganize mlx5_ifc_flow_table_context_bits (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Always start IPsec sequence number from 1 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Rely on reqid in IPsec tunnel mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21674}
  - net/mlx5: Clear port select structure when fail to create (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21675}
  - net/mlx5: SF, Fix add port error handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix a lockdep warning as part of the write combining test (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix RDMA TX steering prio (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Fix variable not being completed when function returns (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2025-21662}
  - net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Skip restore TC rules for vport rep without loaded flag (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2024-57801}
  - net/mlx5e: macsec: Maintain TX SA from encoding_sa (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, select MSIX vector 0 for completion queue creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Enable multiplane mode only when it is supported (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, prevent potential error pointer dereference (Benjamin Poirier) [RHEL-72226 RHEL-73517] {CVE-2024-56660}
  - net/mlx5: E-Switch, Fix switching to switchdev mode in MPV (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-Switch, Fix switching to switchdev mode with IB device disabled (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Add implementation for ufile_hw_cleanup device operation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support querying per-plane IB PortCounters (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - RDMA/mlx5: Support OOO RX WQE consumption (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce data placement ordering bits (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Rework header allocation loop (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Drop info array (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Change frag page setup order during allocation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Fix page_index calculation inconsistency (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: SHAMPO, Simplify UMR allocation for headers (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Make vport QoS enablement more flexible for future extensions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Integrate esw_qos_vport_enable logic into rate operations (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize scheduling element operations (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor scheduling element configuration bitmasks (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize max_rate and min_rate setting for nodes (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Simplify QoS normalization by removing error handling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: E-switch, refactor eswitch mode change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: deduplicate {mlx5_,}eq_update_ci() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: relax memory barrier in eq_update_ci() (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5/core: Schedule EQ comp tasklet only if necessary (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: do not create xdp_redirect for non-uplink rep (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: move XDP_REDIRECT sq to dynamic allocation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: HWS, renamed the files in accordance with naming convention (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DR, moved all the SWS code into a separate directory (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rework esw qos domain init and cleanup (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: DPLL, Add clock quality level op implementation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5: simplify EQ interrupt polling logic (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - mlx5: fix typo in "mlx5_cqwq_get_cqe_enahnced_comp" (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update features on ring size change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5e: Update features on MTU change (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: unique names for per device caches (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, rename modify header struct member action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: fs, rename packet reformat struct member action (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Only create VEPA flow table when in VEPA mode (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add sync reset drop mode support (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Generalize QoS operations for nodes and vports (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Simplify QoS scheduling element configuration (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Remove vport QoS enabled flag (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor vport QoS to use scheduling node structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor vport scheduling element creation function (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce node struct and rename group terminology to node (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Rename vport QoS group reference to parent (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Restrict domain list insertion to root TSAR ancestors (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add parent group support in rate group structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Introduce node type to rate group structure (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Refactor QoS group scheduling element creation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Add support check for TSAR types in QoS scheduling (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: Unify QoS element type checks across NIC and E-Switch (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Refactor locking to a qos domain mutex (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Store rate groups in a qos domain (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Rename rate group 'list' as 'parent_entry' (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Add an explicit 'dev' to vport trace calls (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Store the eswitch in a mlx5_esw_rate_group (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Drop 'esw' param from vport qos functions (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Always create group0 (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Maintain rate group vport members in a list (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Refactor and document bw_share calculation (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Consistently name vport vars as 'vport' (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Rename vport 'tsar' into 'sched_elem'. (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: qos: Flesh out element_attributes in mlx5_ifc.h (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Remove mlx5_fc_create_ex (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Don't maintain a counter count (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Drop unneeded cacheline alignment (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Replace IDR+lists with xarray (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Use kvmalloc for bulk query buffer (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - net/mlx5: hw counters: Make fc_stats & fc_pool private (Benjamin Poirier) [RHEL-72226 RHEL-73517]
  - perf script: perf script tests fails with segfault (Jakub Brnak) [RHEL-71129]
  - tracing/kprobes: Check whether get_kretprobe() returns NULL in kretprobe_dispatcher() (Jerome Marchand) [RHEL-101938]
  - treewide: Switch/rename to timer_delete[_sync]() (mlx4) (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: select PAGE_POOL (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: use the page pool for Rx buffers (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: remove the local XDP fast-recycling ring (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: don't try to complete XDP frames in netpoll (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - eth: mlx4: create a page pool for Rx (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - net/mlx4_core: Avoid impossible mlx4_db_alloc() order value (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - mlx4: Remove unused functions (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Support report_port_event() ops (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Use DMA iterator to write MTT (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Use ib_umem_find_best_pgsz() to calculate MTT size (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array (Benjamin Poirier) [RHEL-72015 RHEL-72020 RHEL-72224 RHEL-73519]
  - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-109507]
  - smb3: fix for slab out of bounds on mount to ksmbd (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-109507]
  - smb: convert to ctime accessor functions (Paulo Alcantara) [RHEL-109507]
  - cifs: Fix null-ptr-deref by static initializing global lock (Paulo Alcantara) [RHEL-109507]
  - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-109507]
  - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-109507]
  - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-109507]
  - smb: client: fix creating symlinks under POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb: client: default to nonativesocket under POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb: client: set symlink type as native for POSIX mounts (Paulo Alcantara) [RHEL-109507]
  - smb3 client: add way to show directory leases for improved debugging (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing iocharset mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing domain mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing pass2 mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing pass mount option (Paulo Alcantara) [RHEL-109507]
  - smb: client: get rid of kstrdup() when parsing user mount option (Paulo Alcantara) [RHEL-109507]
  - cifs: Add support for creating reparse points over SMB1 (Paulo Alcantara) [RHEL-109507]
  - cifs: Do not query WSL EAs for native SMB symlink (Paulo Alcantara) [RHEL-109507]
  - cifs: Optimize CIFSFindFirst() response when not searching (Paulo Alcantara) [RHEL-109507]
  - cifs: Fix calling CIFSFindFirst() for root path without msearch (Paulo Alcantara) [RHEL-109507]
  - cifs: add new field to track the last access time of cfid (Paulo Alcantara) [RHEL-109507]
  - smb: change return type of cached_dir_lease_break() to bool (Paulo Alcantara) [RHEL-109507]
  - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109507]
  - smb: invalidate and close cached directory when creating child entries (Paulo Alcantara) [RHEL-109507]
  - smb: client: use ParentLeaseKey in cifs_do_create (Paulo Alcantara) [RHEL-109507]
  - smb: client: use ParentLeaseKey in open_cached_dir (Paulo Alcantara) [RHEL-109507]
  - smb: client: add ParentLeaseKey support (Paulo Alcantara) [RHEL-109507]
  - net: openvswitch: allow providing upcall pid for the 'execute' command (Aaron Conole) [RHEL-84596]
  - net: netlink: add nla_get_*_default() accessors (Aaron Conole) [RHEL-84596]
  - benet: fix BUG when creating VFs (Michal Schmidt) [RHEL-106952]
  - eth: bnxt: fix missing ring index trim on error path (Michal Schmidt) [RHEL-107291] {CVE-2025-37873}
  - treewide: Switch/rename to timer_delete[_sync]() (bnxt) (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix memory leak in queue reset (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} (Michal Schmidt) [RHEL-107291] {CVE-2025-21973}
  - eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (Michal Schmidt) [RHEL-107291] {CVE-2025-21960}
  - eth: bnxt: fix out-of-range access of vnic_info array (Michal Schmidt) [RHEL-107291] {CVE-2025-22112}
  - eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in queue restart logic (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() (Michal Schmidt) [RHEL-107291] {CVE-2025-21974}
  - eth: bnxt: fix truesize for mb-xdp-pass case (Michal Schmidt) [RHEL-107291 RHEL-87499] {CVE-2025-21961}
  - net: ethtool: populate the default HDS params in the core (bnxt) (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: fix string truncation warning in FW version (Michal Schmidt) [RHEL-107291]
  - eth: bnxt: always recalculate features after XDP clearing, fix null-deref (Michal Schmidt) [RHEL-107291] {CVE-2025-21682}
  - net: bnxt: use ethtool string helpers (Michal Schmidt) [RHEL-107291]
  - eth: Fix typo 'accelaration'. 'exprienced' and 'rewritting' (bnxt) (Michal Schmidt) [RHEL-107291]
  - smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-102433]
  - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-102433]
  - drm/amd/display: Fix AMDGPU_MAX_BL_LEVEL value (Robert Foss) [RHEL-75952]
  - drm/amd/display: Export full brightness range to userspace (Robert Foss) [RHEL-75952]
  - drm/amd/display: Optimize custom brightness curve (Robert Foss) [RHEL-75952]
  - drm/amd/display: Only read ACPI backlight caps once (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix default DC and AC levels (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add debugging message for brightness caps (Robert Foss) [RHEL-75952]
  - drm/amd/display: Get LTTPR IEEE OUI/Device ID From Closest LTTPR To Host (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add early 8b/10b channel equalization test pattern sequence (Robert Foss) [RHEL-75952]
  - drm/amdgpu/mes: add missing locking in helper functions (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix mpv playback corruption on weston (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add dc cap for dp tunneling (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (Robert Foss) [RHEL-75952]
  - drm/amdgpu: add kicker fws loading for gfx11/smu13/psp13 (Robert Foss) [RHEL-75952]
  - drm/amdgpu: switch job hw_fence to amdgpu_fence (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences (Robert Foss) [RHEL-75952]
  - drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL (Robert Foss) [RHEL-75952]
  - drm/xe: Fix early wedge on GuC load failure (Robert Foss) [RHEL-75952]
  - drm/xe: Fix taking invalid lock on wedge (Robert Foss) [RHEL-75952]
  - drm/xe: Fix memset on iomem (Robert Foss) [RHEL-75952]
  - drm/amd/display: Check dce_hwseq before dereferencing it (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add kicker device detection (Robert Foss) [RHEL-75952]
  - drm/amdgpu: VCN v5_0_1 to prevent FW checking RB during DPG pause (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix RMCM programming seq errors (Robert Foss) [RHEL-75952]
  - drm/xe/guc_submit: add back fix (Robert Foss) [RHEL-75952]
  - drm/xe/sched: stop re-submitting signalled jobs (Robert Foss) [RHEL-75952]
  - drm/xe/vm: move rebind_work init earlier (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct non-OLED pre_T11_delay. (Robert Foss) [RHEL-75952]
  - drm/amdgpu: disable workload profile switching when OD is enabled (Robert Foss) [RHEL-75952]
  - drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add null pointer check for get_first_active_display() (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Check return value when getting default PHY config (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix connecting to next bridge (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix phy de-init and flag it so (Robert Foss) [RHEL-75952]
  - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Robert Foss) [RHEL-75952]
  - drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read (Robert Foss) [RHEL-75952]
  - drm/i915/ptl: Use everywhere the correct DDI port clock select mask (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Fix race in GWS queue scheduling (Robert Foss) [RHEL-75952]
  - drm/udl: Unregister device before cleaning up on disconnect (Robert Foss) [RHEL-75952]
  - drm/tegra: Fix a possible null pointer dereference (Robert Foss) [RHEL-75952]
  - drm/tegra: Assign plane type before registration (Robert Foss) [RHEL-75952]
  - drm/simpledrm: Do not upcast in release helpers (Robert Foss) [RHEL-75952]
  - drm/panel: simple: Tianma TM070JDHG34-00: add delays (Robert Foss) [RHEL-75952]
  - drm/cirrus-qemu: Fix pitch programming (Robert Foss) [RHEL-75952]
  - drm/ast: Fix comment on modeset lock (Robert Foss) [RHEL-75952]
  - drm/xe: Process deferred GGTT node removals on device unwind (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Explicitly exit CT safe mode on unwind (Robert Foss) [RHEL-75952]
  - drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type (Robert Foss) [RHEL-75952]
  - drm/bridge: ti-sn65dsi86: make use of debugfs_init callback (Robert Foss) [RHEL-75952]
  - drm/i915: fix build error some more (Robert Foss) [RHEL-75952]
  - drm/amd: Adjust output for discovery error handling (Robert Foss) [RHEL-75952]
  - drm: writeback: Fix drm_writeback_connector_cleanup signature (Robert Foss) [RHEL-75952]
  - drm/xe: move DPT l2 flush to a more sensible place (Robert Foss) [RHEL-75952]
  - drm/xe: Move DSB l2 flush to a more sensible place (Robert Foss) [RHEL-75952]
  - drm/i915/snps_hdmi_pll: Fix 64-bit divisor truncation by using div64_u64 (Robert Foss) [RHEL-75952]
  - drm/xe/display: Add check for alloc_ordered_workqueue() (Robert Foss) [RHEL-75952]
  - drm/amdgpu/mes: add compatibility checks for set_hw_resource_1 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add sanity checks for drm_edid_raw() (Robert Foss) [RHEL-75952]
  - drm/i915/display: Add check for alloc_ordered_workqueue() and alloc_workqueue() (Robert Foss) [RHEL-75952]
  - Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1" (Robert Foss) [RHEL-75952]
  - drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1 (Robert Foss) [RHEL-75952]
  - drm/scheduler: signal scheduled fence when kill job (Robert Foss) [RHEL-75952]
  - drm/amdgpu: seq64 memory unmap uses uninterruptible lock (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn2.5: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn3: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn4: read back register after written (Robert Foss) [RHEL-75952]
  - drm/amdgpu/vcn5.0.1: read back register after written (Robert Foss) [RHEL-75952]
  - amd/amdkfd: fix a kfd_process ref leak (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: Fix VUpdate offset calculations for dcn401" (Robert Foss) [RHEL-75952]
  - drm/xe/bmg: Update Wa_16023588340 (Robert Foss) [RHEL-75952]
  - drm/amdkfd: move SDMA queue reset capability check to node_show (Robert Foss) [RHEL-75952]
  - drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled (Robert Foss) [RHEL-75952]
  - drm/nouveau/bl: increase buffer size to avoid truncate warning (Robert Foss) [RHEL-75952]
  - drm/ssd130x: fix ssd132x_clear_screen() columns (Robert Foss) [RHEL-75952]
  - drm/xe/svm: Fix regression disallowing 64K SVM migration (Robert Foss) [RHEL-75952]
  - drm/appletbdrm: Make appletbdrm depend on X86 (Robert Foss) [RHEL-75952]
  - udmabuf: use sgtable-based scatterlist wrappers (Robert Foss) [RHEL-75952]
  - drm/panel: simple: Add POWERTIP PH128800T004-ZZA01 panel entry (Robert Foss) [RHEL-75952]
  - drm/xe/uc: Remove static from loop variable (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add indirect L1_TLB_CNTL reg programming for VFs (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB (Robert Foss) [RHEL-75952]
  - drm/amd/display: Restructure DMI quirks (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct prefetch calculation (Robert Foss) [RHEL-75952]
  - drm/amd/pm: Reset SMU v13.0.x custom settings (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix VUpdate offset calculations for dcn401 (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx9: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amd/display: disable EASF narrow filter sharpening (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx8: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Disallow partition query during reset (Robert Foss) [RHEL-75952]
  - drm/amdgpu: fix MES GFX mask (Robert Foss) [RHEL-75952]
  - drm/amd/display: Fix Vertical Interrupt definitions for dcn32, dcn401 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Correct SSC enable detection for DCN351 (Robert Foss) [RHEL-75952]
  - drm/amd/display: Update IPS sequential_ono requirement checks (Robert Foss) [RHEL-75952]
  - drm/xe/vf: Fix guc_info debugfs for VFs (Robert Foss) [RHEL-75952]
  - drm/xe: Use copy_from_user() instead of __copy_from_user() (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx7: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/ttm/tests: fix incorrect assert in ttm_bo_unreserve_bulk() (Robert Foss) [RHEL-75952]
  - drm/amd/display: fix zero value for APU watermark_c (Robert Foss) [RHEL-75952]
  - drm: panel-orientation-quirks: Add ZOTAC Gaming Zone (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx10: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amd/display: Do Not Consider DSC if Valid Config Not Found (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Add basic validation for RAS header (Robert Foss) [RHEL-75952]
  - drm/amd/display: Skip to enable dsc if it has been off (Robert Foss) [RHEL-75952]
  - drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() (Robert Foss) [RHEL-75952]
  - drm/nouveau/gsp: fix rm shutdown wait condition (Robert Foss) [RHEL-75952]
  - drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (Robert Foss) [RHEL-75952]
  - drm/nouveau: fix hibernate on disabled GPU (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx11: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/amdkfd: Drop workaround for GC v9.4.3 revID 0 (Robert Foss) [RHEL-75952]
  - drm/bridge: anx7625: change the gpiod_set_value API (Robert Foss) [RHEL-75952]
  - drm/panthor: Don't update MMU_INT_MASK in panthor_mmu_irq_handler() (Robert Foss) [RHEL-75952]
  - drm/bridge: anx7625: enable HPD interrupts (Robert Foss) [RHEL-75952]
  - drm/panel/sharp-ls043t1le01: Use _multi variants (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() (Robert Foss) [RHEL-75952]
  - drm/xe: Fix CFI violation when accessing sysfs files (Robert Foss) [RHEL-75952]
  - drm/amd/display: DCN32 null data check (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Fix API status offset for MES queue reset (Robert Foss) [RHEL-75952]
  - drm/dp: add option to disable zero sized address only transactions. (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx6: fix CSIB handling (Robert Foss) [RHEL-75952]
  - drm/bridge: select DRM_KMS_HELPER for AUX_BRIDGE (Robert Foss) [RHEL-75952]
  - drm/amd/display: disable DPP RCG before DPP CLK enable (Robert Foss) [RHEL-75952]
  - accel/ivpu: Fix warning in ivpu_gem_bo_free() (Robert Foss) [RHEL-75952]
  - accel/ivpu: Use dma_resv_lock() instead of a custom mutex (Robert Foss) [RHEL-75952]
  - accel/ivpu: Trigger device recovery on engine reset/resume failure (Robert Foss) [RHEL-75952]
  - accel/ivpu: Use firmware names from upstream repo (Robert Foss) [RHEL-75952]
  - accel/ivpu: Improve buffer object logging (Robert Foss) [RHEL-75952]
  - drm/xe/lrc: Use a temporary buffer for WA BB (Robert Foss) [RHEL-75952]
  - drm/xe/pxp: Clarify PXP queue creation behavior if PXP is not ready (Robert Foss) [RHEL-75952]
  - drm/xe/pxp: Use the correct define in the set_property_funcs array (Robert Foss) [RHEL-75952]
  - drm/xe: Rework eviction rejection of bound external bos (Robert Foss) [RHEL-75952]
  - drm/xe/vsec: fix CONFIG_INTEL_VSEC dependency (Robert Foss) [RHEL-75952]
  - drm/xe/vm: move xe_svm_init() earlier (Robert Foss) [RHEL-75952]
  - drm/panel-simple: fix the warnings for the Evervision VGG644804 (Robert Foss) [RHEL-75952]
  - drm/i915/display: Fix u32 overflow in SNPS PHY HDMI PLL setup (Robert Foss) [RHEL-75952]
  - drm/amdgpu/gfx10: Refine Cleaner Shader for GFX10.1.10 (Robert Foss) [RHEL-75952]
  - drm/i915/guc: Handle race condition where wakeref count drops below 0 (Robert Foss) [RHEL-75952]
  - drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP (Robert Foss) [RHEL-75952]
  - drm/i915/guc: Check if expecting reply before decrementing outstanding_submission_g2h (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Fix clk-disable removal (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Add support to get panel from the DP AUX bus (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Remove CONFIG_PM related check in analogix_dp_bind()/analogix_dp_unbind() (Robert Foss) [RHEL-75952]
  - accel/ivpu: Reorder Doorbell Unregister and Command Queue Destruction (Robert Foss) [RHEL-75952]
  - drm/bridge: analogix_dp: Remove the unnecessary calls to clk_disable_unprepare() during probing (Robert Foss) [RHEL-75952]
  - drm/connector: only call HDMI audio helper plugged cb if non-null (Robert Foss) [RHEL-75952]
  - drm/panic: Use a decimal fifo to avoid u64 by u64 divide (Robert Foss) [RHEL-75952]
  - drm/panic: clean Clippy warning (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Make creation of SLPC debugfs files conditional (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Don't expose GuC privileged debugfs files if VF (Robert Foss) [RHEL-75952]
  - drm/xe/guc: Refactor GuC debugfs initialization (Robert Foss) [RHEL-75952]
  - drm/i915/dp_mst: Use the correct connector while computing the link BPP limit on MST (Robert Foss) [RHEL-75952]
  - drm/amd/display: Don't check for NULL divisor in fixpt code (Robert Foss) [RHEL-75952]
  - drm/tegra: rgb: Fix the unbound reference count (Robert Foss) [RHEL-75952]
  - drm/vkms: Adjust vkms_state->active_planes allocation type (Robert Foss) [RHEL-75952]
  - drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (Robert Foss) [RHEL-75952]
  - drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe() (Robert Foss) [RHEL-75952]
  - drm/panel: samsung-sofef00: Drop s6e3fc2x01 support (Robert Foss) [RHEL-75952]
  - drm/amdgpu: Refine Cleaner Shader MEC firmware version for GFX10.1.x GPUs (Robert Foss) [RHEL-75952]
  - drm/panthor: Fix the panthor_gpu_coherency_init() error path (Robert Foss) [RHEL-75952]
  - drm/panthor: Update panthor_mmu::irq::mask when needed (Robert Foss) [RHEL-75952]
  - drm/panthor: Call panthor_gpu_coherency_init() after PM resume() (Robert Foss) [RHEL-75952]
  - drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions (Robert Foss) [RHEL-75952]
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Robert Foss) [RHEL-75952]
  - drm/xe/d3cold: Set power state to D3Cold during s2idle/s3 (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Fix dumb buffer leak (Robert Foss) [RHEL-75952]
  - drm/ci: fix merge request rules (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource (Robert Foss) [RHEL-75952]
  - drm/vmwgfx: Add seqno waiter for sync_files (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: more liberal vmin/vmax update for freesync" (Robert Foss) [RHEL-75952]
  - drm/amdkfd: add hqd_sdma_get_doorbell callbacks for gfx7/8 (Robert Foss) [RHEL-75952]
  - Revert "drm/amd/display: pause the workload setting in dm" (Robert Foss) [RHEL-75952]
  - audit,module: restore audit logging in load failure case (Richard Guy Briggs) [RHEL-52839]
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Li Tian) [RHEL-89165]
  - Enable the gs_usb CAN bus driver (Radu Rendec) [RHEL-83402]
  - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-103348]
  - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-103348]


author: Jarod Wilson <jarod@redhat.com> [5.14.0-608.el9]
changelog:
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (CKI Backport Bot) [RHEL-108385]
  - enic: fix incorrect MTU comparison in enic_change_mtu() (CKI Backport Bot) [RHEL-108264]
  - net/enic: Allow at least 8 RQs to always be used (CKI Backport Bot) [RHEL-108264]
  - tpm: tis: Double the timeout B to 4s (Štěpán Horáček) [RHEL-72765]
  - char: tpm: tpm-buf: Add sanity check fallback in read helpers (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Štěpán Horáček) [RHEL-72765]
  - tpm: do not start chip while suspended (Štěpán Horáček) [RHEL-72765]
  - tpm: ibmvtpm: Set TPM_OPS_AUTO_STARTUP flag on driver (Štěpán Horáček) [RHEL-72765]
  - tpm_tis: Explicitly check for error code (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: correct tpm_tis_flags enumeration values (Štěpán Horáček) [RHEL-72765]
  - tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality when interrupts are reenabled on resume (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality in interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Request threaded interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm: Implement usage counter for locality (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: do not check for the active locality in interrupt handler (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Move interrupt mask checks into own function (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Only handle supported interrupts (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality before writing interrupt registers (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Do not skip reset of original interrupt vector (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (Štěpán Horáček) [RHEL-72765]
  - tpm, tpm_tis: Avoid cache incoherency in test for interrupts (Štěpán Horáček) [RHEL-72765]
  - redhat/configs: sync CONFIG_SND_HDA_ACPI with ARK (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: acpi: Make driver's match data const static (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: acpi: Use SYSTEM_SLEEP_PM_OPS() (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda: Add missing NVIDIA HDA codec IDs (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda - Add new driver for HDA controllers listed via (Marcin Juszkiewicz) [RHEL-102695]
  - ALSA: hda/tegra: Add Tegra264 support (Marcin Juszkiewicz) [RHEL-102695]
  - net: clear the dst when changing skb protocol (Felix Maurer) [RHEL-84579]
  - bpf: Revert "bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-uprobe attach logic" (Felix Maurer) [RHEL-84579]
  - bpf, sockmap: Avoid using sk_socket after free when sending (Felix Maurer) [RHEL-84579]
  - xsk: fix an integer overflow in xp_create_and_assign_umem() (Felix Maurer) [RHEL-84579 RHEL-87910] {CVE-2025-21997}
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-101009 RHEL-84579] {CVE-2025-21867}
  - bpf: sockmap, fix proto update hook to avoid dup calls (Felix Maurer) [RHEL-84579]
  - bpf: syzkaller found null ptr deref in unix_bpf proto add (Felix Maurer) [RHEL-84579]
  - xsk: Fix xsk_diag use-after-free error during socket cleanup (Felix Maurer) [RHEL-84579]
  - net: atlantic: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-105362]
  - net: aquantia: Use HWMON_CHANNEL_INFO macro to simplify code (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: Avoid -Wflex-array-member-not-at-end warnings (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: fix warning during hot unplug (Izabela Bakollari) [RHEL-105362]
  - net: atlantic: support reading SFP module info (Izabela Bakollari) [RHEL-105362]
  - ethtool: Block setting of symmetric RSS when non-symmetric rx-flow-hash is requested (CKI Backport Bot) [RHEL-107024]


author: Jarod Wilson <jarod@redhat.com> [5.14.0-609.el9]
changelog:
  - udmabuf: Restore ubuf->unpin_list initialization (José Expósito) [RHEL-109567]
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-79910]
  - ima: annotate iint mutex to avoid lockdep false positive warnings JIRA: https://issues.redhat.com/browse/RHEL-59837 (Aaron Brookner)
  - i2c: mlxbf: avoid 64-bit division (Steve Dunnagan) [RHEL-103885]
  - i2c-mlxbf: Improve I2C bus timing configuration (Steve Dunnagan) [RHEL-103885]
  - i2c-mlxbf: Add repeated start condition support (Steve Dunnagan) [RHEL-103885]
  - i2c: mlxbf: Use str_read_write() helper (Steve Dunnagan) [RHEL-103885]
  - i2c: mlxbf: Use readl_poll_timeout_atomic() for polling (Steve Dunnagan) [RHEL-103885]
  - scsi: ufs: core: Fix use-after free in init error and remove paths (Jared Kangas) [RHEL-84800] {CVE-2025-21739}
  - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove() (Jared Kangas) [RHEL-84800]
  - scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove() (Jared Kangas) [RHEL-84800]
  - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers (Jared Kangas) [RHEL-84800]
  - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (Jared Kangas) [RHEL-84800]
  - scsi: ufs: Convert all platform drivers to return void (Jared Kangas) [RHEL-84800]
  - seqcount: replace smp_rmb() in read_seqcount() with load acquire (Čestmír Kalina) [RHEL-79880]
  - locking/ww_mutex/test: add MODULE_DESCRIPTION() (Čestmír Kalina) [RHEL-79880]
  - lockdep: suggest the fix for "lockdep bfs error:-1" on print_bfs_bug (Čestmír Kalina) [RHEL-79880]
  - lockdep: Use str_plural() to fix Coccinelle warning (Čestmír Kalina) [RHEL-79880]
  - lockdep: fix deadlock issue between lockdep and rcu (Čestmír Kalina) [RHEL-79880]
  - lockdep: Mark emergency sections in lockdep splats (Čestmír Kalina) [RHEL-79880]
  - locking/rwsem: Move is_rwsem_reader_owned() and rwsem_owner() under  CONFIG_DEBUG_RWSEMS (Čestmír Kalina) [RHEL-79880]
  - selftests: net/forwarding: test purge of active DWRR classes (Ivan Vecera) [RHEL-107487]
  - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107487]
  - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107487] {CVE-2025-38107}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-610.el9]
changelog:
  - HID: Intel-thc-hid: Intel-quicki2c: Enhance QuickI2C reset flow (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: pass correct arguments to acpi_evaluate_object (Benjamin Tissoires) [RHEL-65754]
  - HID: Intel-thc-hid: Intel-quickspi: Correct device state names gramatically (Benjamin Tissoires) [RHEL-65754]
  - HID: Intel-thc-hid: Intel-quickspi: Correct device state after S4 (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Fix spelling mistake "intput" -> "input" (Benjamin Tissoires) [RHEL-65754]
  - Hid: Intel-thc-hid: Intel-thc: Fix "dubious: !x | !y" issue (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Remove deprecated PCI API calls (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc: fix CONFIG_HID dependency (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: fix build errors in um mode (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: fix potential memory corruption (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Fix error code in thc_i2c_subip_init() (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add PM implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Complete THC QuickI2C driver (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add HIDI2C protocol implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C ACPI interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C driver hid layer (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quicki2c: Add THC QuickI2C driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add PM implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Complete THC QuickSPI driver (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add HIDSPI protocol implementation (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI ACPI interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI driver hid layer (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-quickspi: Add THC QuickSPI driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC I2C config interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC SPI config interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC interrupt handler (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC LTR interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC DMA interfaces (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add APIs for interrupt (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC PIO operation APIs (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: intel-thc: Add THC registers definition (Benjamin Tissoires) [RHEL-65754]
  - HID: intel-thc-hid: Add basic THC driver skeleton (Benjamin Tissoires) [RHEL-65754]
  - HID: THC: Add documentation (Benjamin Tissoires) [RHEL-65754]
  - kernel.spec: add '-e' option to %preun for kernel-core and kernel-uki-virt (Xuemin Li) [RHEL-107668]
  - loop: use kiocb helpers to fix lockdep warning (Ming Lei) [RHEL-104374]
  - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106648] {CVE-2025-38464}


author: Jarod Wilson <jarod@redhat.com> [5.14.0-611.el9]
changelog:
  - HID: wacom: fix crash in wacom_aes_battery_handler() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix kobject reference count leak (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on sysfs attribute creation failure (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on kobject creation failure (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix shift OOB in kfifo allocation for zero pktlen (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix memory leak on size mismatch in wacom_wac_queue_flush() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: handle kzalloc() allocation failure in wacom_wac_queue_flush() (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Remove static WACOM_PKGLEN_MAX limit (Benjamin Tissoires) [RHEL-102058]
  - HID: Wacom: Add PCI Wacom device support (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Status luminance properties should set brightness of all LEDs (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Improve behavior of non-standard LED brightness values (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: fix when get product name maybe null pointer (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Set eraser status when either 'Eraser' or 'Invert' usage is set (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Support devices with two touchrings (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Add preliminary support for high-resolution wheel scrolling (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Support touchrings with relative motion (Benjamin Tissoires) [RHEL-102058]
  - HID: wacom: Improve warning for tablets falling back to default resolution (Benjamin Tissoires) [RHEL-102058]
  - sched: Change nr_uninterruptible type to unsigned long (Phil Auld) [RHEL-107437]
  - sched/core: Fix migrate_swap() vs. hotplug (Phil Auld) [RHEL-107437]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-611.1.1.el9_7]
changelog:
  - redhat: set defaults for RHEL 9.7 (Augusto Caringi)
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112783] {CVE-2025-38352}
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110312] {CVE-2025-38396}
  - idpf: convert control queue mutex to a spinlock (Michal Schmidt) [RHEL-106051] {CVE-2025-38392}
  - redhat/configs: Enable CONFIG_MITIGATION_TSA for x86 (Waiman Long) [RHEL-83897]
  - x86/process: Move the buffer clearing before MONITOR (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/microcode/AMD: Add TSA microcode SHAs (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - KVM: SVM: Advertise TSA CPUID bits to guests (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/bugs: Rename MDS machinery to something more generic (Waiman Long) [RHEL-83897 RHEL-83906] {CVE-2024-36357 CVE-2024-36350}
  - x86/idle: Use MONITOR and MWAIT mnemonics in <asm/mwait.h> (Waiman Long) [RHEL-83897]
  - x86/idle: Remove .s output beautifying delimiters from simpler asm() templates (Waiman Long) [RHEL-83897]
  - x86/idle: Standardize argument types for MONITOR{,X} and MWAIT{,X} instruction wrappers on 'u32' (Waiman Long) [RHEL-83897]
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and  prefer_mwait_c1_over_halt() (Waiman Long) [RHEL-83897]
  - x86/bugs: Rename mmio_stale_data_clear to cpu_buf_vm_clear (Waiman Long) [RHEL-83897]
  - x86/microcode: Consolidate the loader enablement checking (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-83897] {CVE-2025-22047}
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Waiman Long) [RHEL-83897]
  - x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Remove ret local var in early_apply_microcode() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Return bool from find_blobs_in_containers() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Terminate the erratum_1386_microcode array (Waiman Long) [RHEL-83897] {CVE-2024-56721}
  - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-83897]
  - x86/cpu: Fix formatting of cpuid_bits[] in scattered.c (Waiman Long) [RHEL-83897]
  - x86/cpufeatures: Add X86_FEATURE_AMD_WORKLOAD_CLASS feature bit (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-83897]
  - x86/bugs: Use code segment selector for VERW operand (Waiman Long) [RHEL-83897] {CVE-2024-50072}
  - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-83897]
  - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-83897]
  - x86/CPU/AMD: Improve the erratum 1386 workaround (Waiman Long) [RHEL-83897]
  - x86: Add a comment about the "magic" behind shadow sti before mwait (Waiman Long) [RHEL-83897]
  - x86/bugs: Revert "Reverse instruction order of CLEAR_CPU_BUFFERS" (Waiman Long) [RHEL-83897]
  - scsi: mpt3sas: Fix a fw_event memory leak (Tomas Henzl) [RHEL-108656]
  - Revert "drm/gem-dma: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - Revert "drm/prime: Use dma_buf from GEM object instance" (Robert Foss) [RHEL-106696]
  - drm/framebuffer: Acquire internal references on GEM handles (Robert Foss) [RHEL-106696]
  - drm/gem: Acquire references on GEM handles for framebuffers (CKI Backport Bot) [RHEL-106696] {CVE-2025-38449}
  - Revert "e1000e: change k1 configuration on MTP and later platforms" (Michal Schmidt) [RHEL-110519]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-611.2.1.el9_7]
changelog:
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [RHEL-106430] {CVE-2025-38472}
  - s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113557] {CVE-2025-39694}
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Hangbin Liu) [RHEL-111150] {CVE-2025-38550}
  - devlink: add reserved fields to devlink_*_ops (Petr Oros) [RHEL-111906]
  - ixgbe: prevent from unwanted interface name changes (CKI Backport Bot) [RHEL-109607]
  - devlink: let driver opt out of automatic phys_port_name generation (CKI Backport Bot) [RHEL-109607]
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CKI Backport Bot) [RHEL-109528] {CVE-2025-38500}
  - dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-111904]
  - ice: use fixed adapter index for E825C embedded devices (Michal Schmidt) [RHEL-104010]
  - net: openvswitch: remove misbehaving actions length check (Aaron Conole) [RHEL-83440]
  - irdma: free iwdev->rf after removing MSI-X (Kamal Heib) [RHEL-103278 RHEL-95816]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113332] {CVE-2025-38718}
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112247] {CVE-2023-53125}
  - cpufreq: Move endif to the end of Kconfig file (Mark Langsdorf) [RHEL-112816]
  - cpufreq: Move CPPC configs to common Kconfig and add RISC-V (Mark Langsdorf) [RHEL-112816]
  - HID: core: Harden s32ton() against conversion to 0 bits (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}
  - HID: simplify snto32() (Benjamin Tissoires) [RHEL-111034] {CVE-2025-38556}


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Fix the bootloader workaround for upgrades on ARM machines - covering also differences on AWS
  - Resolves: RHEL-67621, RHEL-51072, RHEL-41193


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Resolves: RHEL-67621, RHEL-67719, RHEL-16881


author: Yuriy Kohut <ykohut@almalinux.org> - 0.22.0-1.elevate.1
changelog:
  - ELevate vendors support for upstream 0.22.0-1 version
  - Update ELevate patch:
    Correct the list of leapp and leapp-repository rpms, that should be preserved during the 9to10 upgrade


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 9.7 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Minor fixes in reports
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Resolves: RHEL-53801, RHEL-77945, RHEL-84978


author: Yuriy Kohut <ykohut@almalinux.org> - 0.22.0-3.elevate.1
changelog:
  - Update ELevate patch:
    - rebase to upstream 0.22.0-3 (hash ffd6d8e456484630f99d98d5bff955914af02aa5)
  - Create symlinks of RHSM certs path like prod-certs/VERSION_MAJOR -> prod-certs/VERSION_MAJOR.VERSION_MINOR
  - Exclude CentOS packages public GPG keys


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-34564


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Eugene Zamriy <ezamriy@msvsphere.ru> - 2.15.2-6.inferit
changelog:
  - Added support for MSVSphere bug tracker
  - Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-10.1
changelog:
  - Backport patches for various CVEs, plus test improvements
    Resolves: RHEL-85906
    Resolves: RHEL-85912
    Resolves: RHEL-85919
    Resolves: RHEL-87061
    Resolves: RHEL-87069
    Resolves: RHEL-87102
    Resolves: RHEL-87120
    Resolves: RHEL-88364
    Resolves: RHEL-88367


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-10.2
changelog:
  - Backport patches for various CVEs
    Resolves: RHEL-85888
    Resolves: RHEL-87081
    Resolves: RHEL-88332
    Resolves: RHEL-92285


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-2
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-72468)
  - add command to set external grandmaster properties (RHEL-90585)
  - refresh link status on faults (RHEL-56168)


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-5
changelog:
  - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-2
changelog:
  - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS
    Vulnerability (CVE-2025-47947)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-3
changelog:
  - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service
    Vulnerability (CVE-2025-48866)


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Eduard Basov <ebasov@msvsphere-os.ru> - 40.9-20.inferit
changelog:
  - Added fractional scaling support for X11
    https://gitlab.gnome.org/3v1n0/mutter/commits/xrandr-scaling
    Scaling appears in the user interface ( 100%, 125%, 150%, 175%, 200% )


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-8.1
changelog:
  - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may
    cause denial of service (CVE-2024-7347)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-4.1
changelog:
  - Resolves: RHEL-84478 - nginx:1.24/nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Wen Liang <wenliang@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support ethtool Forward Error Correction (FEC). RHEL-80786
  - Support nm connection with empty connection.interface-name. RHEL-82662


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-96176
  - Support nmpolicy against down iface. RHEL-88992
  - Support removal VLAN connection with empty ifname. RHEL-93145


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Fix SRIOV VF reference. RHEL-93179
  - Apply dispatch changes first. RHEL-101741


author: Gris Ge <fge@redhat.com> - 2.2.52-1
changelog:
  - Upgrade to 2.2.52
  - Support interface alternative names. RHEL-110777
  - Support IPv4 forwarding. RHEL-110786
  - Support IPSec `leftsendcert` option. RHEL-110633


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Support matching interface via PCI address. RHEL-121109
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121990


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Andrei Radchenko <aradchen@redhat.com> - 1:20.18.2-1
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81158


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-85582


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
  - Resolves: bz#2236544
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
  - Resolves: RHEL-2446
    ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.5 [RHEL-45547]
  - Resolves: RHEL-45547
    ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63096]
  - Resolves: RHEL-63096
    ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)


author: Lili Du <ldu@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99158]
  - Resolves: RHEL-99158 
    ([ESXi][RHEL9] open-vm-tools version 13.0.0 has been released - please rebase)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Kseniia Nivnia <knivnia@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-79113


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify post-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-81967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Add toolchain go1.23.7
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-81359


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Remove explicit go toolchain dependency
  - Update addresses CVE-2025-29786
    Resolves: RHEL-83841


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-82967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85033


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90050


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-2
changelog:
  - Bump revision
  - Go version update to v1.24.4
  - Update addresses CVE-2025-4673
    Resolves: RHEL-105058


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039)
  - Fix a multilib regression in PCP header files (RHEL-93186)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.30-2
changelog:
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <rcollet@redhat.com> - 8.0.30-3
changelog:
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Dimitris Soumis <dsoumis@redhat.com> - 1:9.0.50-1.el9_2.2
changelog:
  - Resolves: RHEL-71715
    pki-servlet-engine: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x"
  - Resolves: RHEL-83262


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Masahiro Matsuya <mmatsuya@redhat.com> - 15.5-1
changelog:
  - update to 15.5
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Brian C. Lane <bcl@redhat.com> - 3.32.11-1
changelog:
  - tox: Only run unit tests for python 3.6 (bcl)
    Related: RHEL-17662
  - Add conflict test between ostree sources (#2125655) (jkonecny)
    Related: RHEL-17662
  - Fix missing seen check for output generation (#2125655) (jkonecny)
    Related: RHEL-17662
  - Add new ostreecontainer command (#2125655) (jkonecny)
    Resolves: RHEL-17662
  - Check the conflicting commands automatically (vponcova)
    Related: RHEL-17662
  - Fix tests for conflicting commands (vponcova)
    Related: RHEL-17662
  - Add conflicting commands support (bcl)
    Related: RHEL-17662


author: Brian C. Lane <bcl@redhat.com> - 3.32.12-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61432


author: Brian C. Lane <bcl@redhat.com> - 3.32.14-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61432
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76501


author: Brian C. Lane <bcl@redhat.com> - 3.32.15-1
changelog:
  - workflows: run tests using only python 3.9 (bcl)
    Related: RHEL-75659
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-75659
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-75659


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Marek Blaha <mblaha@redhat.com> - 4.3.0-21
changelog:
  - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320)
  - Fix bogus changelog entry date


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: TomasHalman <thalman@redhat.com> - 3.1.1-3
changelog:
  - Remove RSA support
  - Remove build dependency on blinker
    Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:4.8.0.post1-1
changelog:
  - update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
  - Related: Jira:RHEL-2112


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.3-1
changelog:
  - Update to 7.4.3
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-3-2023-10-24
  - Fixes: rhbz#2245983


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Andrea Claudi <aclaudi@redhat.com> - 2.5.0-1.el9
changelog:
  - Don't package scapy tests (Andrea Claudi)
  - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667]
  - New version 2.5.0 (Andrea Claudi) [RHEL-657]


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Jiri Konecny <jkonecny@redhat.com> - 1.8.3-1
changelog:
  - Fix bumpver Makefile target (Jiri Konecny)
  - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny)
    Related: rhbz#2134889
  - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny)
    Related: rhbz#2134889
  - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny)
    Resolves: rhbz#2134889
  - Add Makefile target for local container tests (Jiri Konecny)
  - Use localization from rhel-9 weblate translation component (Jiri Konecny)
  - Remove changelog from the upstream spec file (Jiri Konecny)
  - Fix spec file archive link (Jiri Konecny)
  - Include also documentation to the tarball (Jiri Konecny)
  - Rename doc directory to docs (Jiri Konecny)
  - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny)
  - Update packit config to reflect new tag naming (Jiri Konecny)
  - Change tag name to just version (Jiri Konecny)
  - Fix GitHub workflow checkout (Jiri Konecny)
  - Switch to packit new fedora-latest alias (Jiri Konecny)
  - Disable duplicate-code in pylint test (Jiri Konecny)
  - Remove duplicate of code between event loops (Jiri Konecny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.1-5
changelog:
  - Initial package for RHEL 9
  - Resolves: rhbz#2175213
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@ualberta.net>


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.20-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.7.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Raphael Groner <raphgro@fedoraproject.org>
        Tim Orling <timothy.t.orling@linux.intel.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.28.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.16.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        yatin <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.26.12-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64886, RHEL-70320


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-88897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98057, RHEL-98019, RHEL-97811, RHEL-98183, RHEL-98210


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.0-4
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.3.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumír Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@twistedmatrix.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Jon Ciesla <limburgher@gmail.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@fedoraproject.org>
        Kevin Kofler <Kevin@tigcc.ticalc.org>
        Luke Macken <lmacken@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Peter Halliday <hoangelos@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tim Flink <tflink@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <tomas.n@orsava.cz>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Ville Skyttä <ville.skytta@iki.fi>


author: Miro Hrončok <mhroncok@redhat.com> - 23.2.1-3
changelog:
  - Don't RPM Provide pip
  - Remove a superfluous RPM Conflict with python-pip
  - Allows to install python3.12-pip together with python3-pip


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-22
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.20-13
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.28.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


