# changelog

author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-81948)
  - Fix order of parsing port/controller properies in nmcli (RHEL-80273)
  - Improve interface activation logic (RHEL-80157)
  - Fix WireGuard IPv6 firewall rules (RHEL-79975)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83058)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-70484)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102774)
  - Allow setting IP method to disabled in port connections (RHEL-90756)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102318)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.55.4-1
changelog:
  - Update to 1.55.4 (dev)
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
  - Add support for a DHCP client-id kernelarg (RHEL-108454)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.55.90-1
changelog:
  - Update to 1.56.0 (rc1)
  - Support setting protocol version of HSR/PRP (RHEL-100764)
  - Support interlink for HSR/PRP (RHEL-100768)
  - Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
  - Improve logging of networking off (RHEL-103925)
  - Don't delete unrelated OVS ports (RHEL-120176)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.34-1
changelog:
  - Update to 2.0.34 (rhbz#2105023)
  - Resolve issues found by rpmdiff
    - add a patch to fix getaddrinfo detection to avoid using gethostbyname
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
  - Conditional Perl & Python module build, by default disabled


author: Eduard Abdullin <eabdullin@almalinux.org> - 10.0-12
changelog:
  - Add dist_purl_namespace to macros.dist
  - Re-disable rpcbind.service and rpcbind.socket
  - Enable greenboot services


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.39-1
changelog:
  - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
    (k.koukiou)
    Related: RHEL-58215
  - bootc: Collect kernel arguments before installation to pass to bootc
    (k.koukiou)
    Related: RHEL-58215
  - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
    Related: RHEL-58215
  - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
    Related: RHEL-58215
  - Add bootc installation method (ppolawsk)
    Resolves: RHEL-58215
  - Include bootc command in expected pykickstart commands (ppolawsk)
    Related: RHEL-58215


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.40-1
changelog:
  - rhsm: add --flatpak-registry-url support (bciconel)
    Resolves: RHEL-132652
  - flatpak: handle self-signed certificate errors in registry sources (bciconel)
    Resolves: RHEL-132652
  - flatpak: add utility to check for self-signed certificate errors (bciconel)
    Resolves: RHEL-132652
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-99673
  - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
    Resolves: RHEL-112702
    Related: RHEL-132666


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.41-1
changelog:
  - ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
    Resolves: RHEL-66155
  - modules: rpm_ostree: allow /boot/efi mount point in bootc installation
    (k.koukiou)
    Resolves: RHEL-141155


author: Bruno <bciconel@redhat.com> - 40.22.3.42-1
changelog:
  - payloads: flatpak: fix SSL error detection on older Python versions
    (bciconel)
    Related: RHEL-141069
    Resolves: RHEL-142694


author: Bruno <bciconel@redhat.com> - 40.22.3.43-1
changelog:
  - installation: run subscription tasks after network configuration (bciconel)
    Resolves: RHEL-135111
  - subscription: ensure /var/lib/insights exists before running insights-client
    (bciconel)
    Resolves: RHEL-135111
  - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
    Resolves: RHEL-117685
  - Only show compatible translations in text mode (mkolman)
    Resolves: RHEL-16168


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.44-1
changelog:
  - storage: stop creating /etc/mtab symlink during installation (k.koukiou)
    Related: RHEL-135116
  - rescue: Add warning for immutable systems (k.koukiou)
    Related: RHEL-135116
  - rescue: detect OSTree deployments in rescue mode and show deployment path
    (k.koukiou)
    Resolves: RHEL-135116
  - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
    (k.koukiou)
    Related: RHEL-135116
  - network: List all network interfaces IP for RDP session (ppolawsk)
    Resolves: RHEL-74268


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.45-1
changelog:
  - Fix user input in driver disk menu is not displayed (adamkankovsky)
    Resolves: RHEL-58828
  - flatpak: tests: fix unreachable code (fsouza.bruno)
    Related: RHEL-143566
  - flatpak: Only override remote URLs when subscription module is available
    (bciconel)
    Related: RHEL-143566
  - flatpak: Make installation failures non-blocking (bciconel)
    Resolves: RHEL-143566
  - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
    Resolves: RHEL-144456


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.1-1
changelog:
  - New upstream version 1.14.1
  - Use github tarballs again.
  - New binary augprint.
  - New bash-completions subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
    resolves: RHEL-76283
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.9
changelog:
  - Fix: fails to parse /etc/fstab when there is a double comma after character
    resolves: RHEL-77279
  - Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
    resolves: RHEL-113748
  - Synchronize spec file with Fedora


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to the latest version (RHEL-78921)
  - Rebuild with LLVM 20 (RHEL-81772)
  - Silence warning of trace tools (RHEL-68952)
  - Fix bpf-runqlen (RHEL-91190)
  - Fix sslsniff and sofdsnoop (RHEL-58348)
  - Fix slabratetop (RHEL-58810)
  - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
  - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
  - Fix multiples ppc64 tools (RHEL-58147)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-12
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Bastien Nocera <bnocera@redhat.com> - 5.86-1
changelog:
  - Update to 5.86
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Fix audio output not working in some circumstances
    Resolves: RHEL-147735


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: Veronika Hanulikova <vhanulik@redhat.com> - 2.9.11-7
changelog:
  - Add missing man page for create-cracklib-dict (RHEL-39972)
  - Preserve special characters in cracklib-format (RHEL-39972)


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Ondrej Kozina <okozina@redhat.com> - 2.7.0-2
changelog:
  - Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
  - patch: Do not compile unused internal argon2 implementation


author: Ondrej Kozina <okozina@redhat.com> - 2.7.5-1
changelog:
  - Update to cryptsetup 2.7.5
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - Resolves: RHEL-57036 RHEL-57037 RHEL-61581


author: Kristina Hanicova <khanicov@redhat.com> - 2.8.1-2
changelog:
  - patch: opal: Submit PSID reset command to R/W file descriptor.
  - patch: Read integrity profile info from top level device.
  - patch: Fix possible use of uninitialized variable.
  - patch: Reinstate pbkdf serialization flag in device activation.
  - patch: Fix LUKS2 device status in inline HW mode and detached header.
  - patch: Set inline integrity flag if no underlying dm-integrity device.
  - patch: Fix wrong device size status reports in cryptsetup and integritysetup.
  - Resolves: RHEL-122285 RHEL-125150 RHEL-125155 RHEL-125166 RHEL-132584 RHEL-140107


author: Jeff Moyer <jmoyer@redhat.com> - 80-4
changelog:
  - Fix listing of region capabilities (Jeff Moyer)
  - Remove orphaned patch file (Jeff Moyer)
  - Resolves: RHEL-80436


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Filip Suba <fsuba@redhat.com> - 0.9.9-11
changelog:
  - Add 0033-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
    * Fixes RHEL-103112 ("Update multipath builtin config to add new
      device defaults [rhel-10]")
  - Resolves: RHEL-103112


author: Lin Li <lilin@redhat.com> - 0.9.9-12
changelog:
  Add 0034-libmultipath-fix-crash-in-print_foreign_topology.patch
    * Fixes RHEL-107436 ("Running multipath -ll on system with "enable_foreign
      nvme" results in segfault")
  Resolves: RHEL-107436


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-13
changelog:
  - Add 0035-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
  - Add 0036-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
  - Add 0037-libmpathpersist-check-released-key-against-the-reser.patch
  - Add 0038-multipathd-remove-thread-from-mpath_pr_event_handle.patch
  - Add 0039-libmpathpersist-remove-uneeded-wrapper-function.patch
  - Add 0040-libmpathpersist-reduce-log-level-for-persistent-rese.patch
  - Add 0041-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
  - Add 0042-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
  - Add 0043-libmpathpersist-limit-changing-prflag-in-update_map_.patch
  - Add 0044-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
  - Add 0045-libmpathpersist-remove-useless-function-send_prout_a.patch
  - Add 0046-libmpathpersist-redesign-failed-release-workaround.patch
  - Add 0047-libmpathpersist-fail-the-release-if-all-threads-fail.patch
  - Add 0048-libmpathpersist-Handle-changing-key-corner-case.patch
  - Add 0049-libmpathpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
  - Add 0050-libmultipath-rename-prflag_value-enums.patch
  - Add 0051-libmpathpersist-use-a-switch-statement-for-prout-com.patch
  - Add 0052-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
  - Add 0053-libmpathpersist-remove-update_map_pr-code-for-NULL-p.patch
  - Add 0054-libmpathpersist-move-update_map_pr-to-multipathd.patch
  - Add 0055-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
  - Add 0056-libmpathpersist-clean-up-duplicate-function-declarat.patch
  - Add 0057-multipathd-wrap-setting-and-unsetting-prflag.patch
  - Add 0058-multipathd-unregister-PR-key-when-path-is-restored-i.patch
  - Add 0059-libmpathpersist-Fix-up-reservation_key-checking.patch
  - Add 0060-libmpathpersist-change-how-reservation-conflicts-are.patch
  - Add 0061-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
  - Add 0062-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
  - Add 0063-libmpathpersist-Restore-old-reservation-key-on-failu.patch
  - Add 0064-libmpathpersist-update-reservation-key-before-checki.patch
  - Add 0065-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
  - Add 0066-libmpathpersist-Don-t-always-fail-registrations-for-.patch
  - Add 0067-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
  - Add 0068-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
  - Add 0069-libmpathpersist-reregister-keys-when-self-preempting.patch
  - Add 0070-libmpathpersist-handle-updating-key-race-condition.patch
  - Add 0071-libmpathpersist-handle-preempting-all-registrants-re.patch
  - Add 0072-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
  - Add 0073-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
  - Add 0074-libmpathpersist-use-check_holding_reservation-in-mpa.patch
  - Add 0075-libmpathpersist-Fix-unregistering-while-holding-the-.patch
  - Add 0076-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
  - Add 0077-multipathd-Fix-tracking-of-old-PR-key.patch
    * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
      reservation handling [rhel-10]")
  - Resolves: RHEL-118720


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-14
changelog:
  - Add 0078-multipathd-Fix-race-while-registering-PR-key.patch
  - Add 0079-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
    * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
      reservation handling [rhel-10]")
  - Resolves: RHEL-118720


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-15
changelog:
  - Add 0080-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
    * Fixes RHEL-128338 ("Update the multipath.conf stanza for Infinidat
      storage")
  - Resolves: RHEL-128338


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-16
changelog:
  - Add 0081-multipathd-make-multipathd-show-status-busy-checker-.patch
    * Fixes RHEL-136405 ("improve Busy checking for multipathd show status
      output")
  - Add 0082-multipathd-print-path-offline-message-even-without-a.patch
    * Fixes RHEL-133815 ("log_checker_err is not printing messages
      repeatedly for failed path [rhel-10]")
  - Resolves: RHEL-133815
  - Resolves: RHEL-136405


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-17
changelog:
  - Add 0083-libmultipath-add-purge_disconnected-configuration-op.patch
  - Add 0084-multipathd-implement-purge-functionality-for-disconn.patch
    * Fixes RHEL-141287 ("Add purge_disconnected support to multipathd")
  - Resolves: RHEL-141287


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-18
changelog:
  - Add 0085-libmpathpersist-fix-register-retry-status-checking.patch
  - Add 0086-multipathd-remember-number-of-registered-keys-when-i.patch
  - Add 0087-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
    * Fixes RHEL-129442 ("Improve multipathd's handling of updating
      persistent reservations on restored paths.")
  - Resolves: RHEL-129442


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-19
changelog:
  - Add 0088-libmultipath-set-offline-whenever-path-is-not-online.patch
    * Fixes RHEL-151447 ("multipathd doesn't print checker messages for
      some offline path states")
  - Resolves: RHEL-151447


author: Ales Nezbeda <anezbeda@redhat.com> - 0.8.8-49
changelog:
  - Fix SPDX license tag based on further research
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1976038980
  - Related: RHEL-37885


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-17
changelog:
  - fix building with latest openssl (RHEL-117460)
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)


author: Than Ngo <than@redhat.com> - 2:1.12.0-3
changelog:
  - Fix Non-reproducible file names in doxygen output
  - Fix broken markdown links to anchors
  Related: RHEL-58045


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-2
changelog:
  - edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
  - edk2-add-dbx-update-script.patch [RHEL-96866]
  - edk2-update-dbx-to-20250610.patch [RHEL-96866]
  - Resolves: RHEL-2908
    ([aarch64][EDK2] UEFI writable variable service in QEMU)
  - Resolves: RHEL-96866
    ([edk2,rhel-10] dbx update 20250610)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-1
changelog:
  - Rebase to edk2-stable202508 [RHEL-111718]
  - Resolves: RHEL-111718
    ([edk2,rhel-10] rebase to edk2-stable202508)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-2
changelog:
  - edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
  - Resolves: RHEL-109548
    ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-3
changelog:
  - edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
  - Resolves: RHEL-115880
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-4
changelog:
  - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
  - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
  - Resolves: RHEL-126085
    ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-1
changelog:
  - Rebase to edk2-stable202511 [RHEL-118386]
  - Resolves: RHEL-118386
    ([edk2,rhel-10] rebase to edk2-stable202511)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-2
changelog:
  - edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
  - Resolves: RHEL-138335
    ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-3
changelog:
  - edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
  - edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
  - edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
  - edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
  - edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
  - Resolves: RHEL-139470
    (Enable memory debug logging support in firmware image configs)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-4
changelog:
  - edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
  - edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
  - edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
  - Resolves: RHEL-134956
    (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
  - Resolves: RHEL-147785
    ([edk2] pick up openssl updates)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-5
changelog:
  - edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
  - Resolves: RHEL-150696
    (edk2: Add JSON descriptors for uefi-vars builds)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Yaakov Selkowitz <yselkowi@redhat.com> - 40-1
changelog:
  - Version bump for F40
  - Define JAVA_HOME, JAVACONFDIRS and %__maven_path
  - Change xmvn configuration location


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Parag Nemade <pnemade AT redhat DOT com> - 20230101-14
changelog:
  - Resolves: RHEL-138159
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138144
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138126
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: Antonio Torres <antorres@redhat.com> - 3.2.8-2
changelog:
  - Disable JIT if PCRE can't allocate executable memory
  - Fix warnings from service file
    Resolves: RHEL-116594


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-8
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
    Resolves: RHEL-142334, RHEL-142318


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15
changelog:
  - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
  - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Arjun Shankar <arjun@redhat.com> - 2.39-111
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-126766)	
  - Upstream commit: ce65d944e38a20cb70af2a48a4b8aa5d8fabe1cc	
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814)	
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)	
  - memalign: reinstate alignment overflow check (CVE-2026-0861)	
  - support: Exit on consistency check failure in resolv_response_add_name	
  - support: Fix FILE * leak in check_for_unshare_hints in test-container	
  - sprof: fix -Wformat warnings on 32-bit hosts	
  - sprof: check pread size and offset for overflow	
  - getaddrinfo.c: Avoid uninitialized pointer access [BZ #32465]	
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704)	
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091)	
  - ppc64le: Restore optimized strncmp for power10	
  - ppc64le: Restore optimized strcmp for power10	
  - AArch64: Optimise SVE scalar callbacks	
  - aarch64: fix includes in SME tests	
  - aarch64: fix cfi directives around __libc_arm_za_disable	
  - aarch64: tests for SME	
  - aarch64: clear ZA state of SME before clone and clone3 syscalls	
  - aarch64: define macro for calling __libc_arm_za_disable	
  - aarch64: update tests for SME	
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp	
  - linux: Also check pkey_get for ENOSYS on tst-pkey (BZ 31996)	
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601)	
  - x86: fix wmemset ifunc stray '!' (bug 33542)	
  - x86: Detect Intel Nova Lake Processor	
  - x86: Detect Intel Wildcat Lake Processor


author: Takao Fujiwara <tfujiwar@redhat.com> - 2018.1-17
changelog:
  - Resolve RHELPLAN-170235 Fix OpenScanHub report
  - Fix deprecated g_spawn_check_exit_status with -Wdeprecated-declarations
  - Fix uninitialized n_failed with -Wanalyzer-use-of-uninitialized-value
  - Fix to check return value of g_setenv() with CWE-252


author: Matthias Clasen <mclasen@redhat.com> - 3.36.0-14
changelog:
  - Use autosetup
  - Rename 14.patch to gnome-menus-01.patch
  - Rearrange after design review
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.36.0-16
changelog:
  - Fix Calculator to be presented
  - Papers should be in Utilities and not in Graphics and Office
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Matthias Clasen <mclasen@redhat.com> - 3.24.43-4
changelog:
  - Stop relying on xpms in the testsuite
    Resolves: RHEL-69453
  - Avoid criticals on headless systems
    Resolves: RHEL-40884
  - Hide emoji chooser unless explicitly requested
    Resolves: RHEL-65214


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Coiby Xu <coxu@redhat.com> - 1.6.2-4
changelog:
  - ima-setup: Use RSAHEADER to tell if a package has been signed
  - ima-setup: skip installing rpm-plugin-ima if it has been installed (RHEL-99356)
  - ima-setup: rebuild all initramfs images to include the integrity dracut module (RHEL-92638)


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 6.2.0-10
changelog:
  - Switch to OpenJDK 21 as default JDK/JRE
  - Drop generated Requires on JRE
  - Drop subpackages related to Java other than 21
  - Resolves: RHEL-49822, RHEL-51276, RHEL-51276


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-212.el10]
changelog:
  - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-150776]
  - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-150776]
  - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-150776]
  - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-150776]
  - redhat: bump RHEL_MINOR for 10.3 (Alexandra Hájková)
  - net: use NUMA drop counters for softnet_data.dropped (Guillaume Nault) [RHEL-145975]
  - inet: raw: add drop_counters to raw sockets (Guillaume Nault) [RHEL-145975]
  - udp: add drop_counters to udp socket (Guillaume Nault) [RHEL-145975]
  - net: add sk->sk_drop_counters (Guillaume Nault) [RHEL-145975]
  - net: add sk_drops_skbadd() helper (Guillaume Nault) [RHEL-145975]
  - net: add sk_drops_read(), sk_drops_inc() and sk_drops_reset() helpers (Guillaume Nault) [RHEL-145975]
  - NFSD: Fix permission check for read access to executable-only files (Scott Mayhew) [RHEL-135095]
  - fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio (Audra Mitchell) [RHEL-97168]
  - configs: riscv: Enable StarFive and ESWIN drivers (Jennifer Berringer) [RHEL-129062]
  - riscv: Fix memory leak in module_frob_arch_sections() (Jennifer Berringer) [RHEL-129062]
  - reset: eswin: Add eic7700 reset driver (Jennifer Berringer) [RHEL-129062]
  - dt-bindings: reset: eswin: Documentation for eic7700 SoC (Jennifer Berringer) [RHEL-129062]
  - riscv: dts: eswin: add HiFive Premier P550 board device tree (Jennifer Berringer) [RHEL-129062]
  - riscv: dts: add initial support for EIC7700 SoC (Jennifer Berringer) [RHEL-129062]
  - dt-bindings: riscv: Add SiFive HiFive Premier P550 board (Jennifer Berringer) [RHEL-129062]
  - riscv: Add Kconfig option for ESWIN platforms (Jennifer Berringer) [RHEL-129062]
  - riscv: add Andes SoC family Kconfig support (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Fix regulator error check and Kconfig dependency (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Fix unsigned comparison to less than zero issue (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Add EIC7700 pinctrl driver (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Optimize PLT/GOT entry counting (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Allocate PLT entries for R_RISCV_PLT32 (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Fix out-of-bounds relocation access (Jennifer Berringer) [RHEL-129062] {CVE-2025-37975}
  - cache: sifive_ccache: Add ESWIN EIC7700 support (Jennifer Berringer) [RHEL-129062]


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-213.el10]
changelog:
  - powerpc/smp: Expose die_id and die_cpumask (Mamatha Inamdar) [RHEL-138728]
  - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-151838]
  - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-151838]
  - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-153335]
  - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Jared Kangas) [RHEL-152643]
  - arm64: dts: s32g: Add device tree information for the OCOTP driver (Jared Kangas) [RHEL-152643]
  - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Jared Kangas) [RHEL-152643]
  - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Jared Kangas) [RHEL-152643]
  - redhat/scripts: remove remnants of git notes usage and dead code (Jan Stancek)
  - vsock: document write-once behavior of the child_ns_mode sysctl (Stefano Garzarella) [RHEL-151754]
  - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-151754]
  - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-151754]
  - vsock: document namespace mode sysctls (Stefano Garzarella) [RHEL-151754]
  - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148483]
  - ice: dpll: fix rclk pin state get and misplaced header macros (Ivan Vecera) [RHEL-146369]
  - ice: dpll: Support E825-C SyncE and dynamic pin discovery (Ivan Vecera) [RHEL-146369]
  - drivers: Add support for DPLL reference count tracking (Ivan Vecera) [RHEL-146369]
  - redhat: configs: Enable CONFIG_DPLL_REFCNT_TRACKER for debug (Ivan Vecera) [RHEL-146369]
  - dpll: Add reference count tracking support (Ivan Vecera) [RHEL-146369]
  - dpll: Enhance and consolidate reference counting logic (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Add support for mux pin type (Ivan Vecera) [RHEL-146369]
  - dpll: Support dynamic pin index allocation (Ivan Vecera) [RHEL-146369]
  - dpll: Add notifier chain for dpll events (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Associate pin with fwnode handle (Ivan Vecera) [RHEL-146369]
  - dpll: Allow associating dpll pin with a firmware node (Ivan Vecera) [RHEL-146369]
  - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-146257]
  - redhat: set defaults for RHEL 10.2 (Scott Weaver)


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-214.el10]
changelog:
  - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618]
  - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618]
  - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618]
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618]
  - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618]
  - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618]
  - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618]
  - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674]
  - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134674]
  - vdpa/mlx5: update MAC address handling in mlx5_vdpa_set_attr() (Cindy Lu) [RHEL-127007]
  - vdpa/mlx5: reuse common function for MAC address updates (Cindy Lu) [RHEL-127007]
  - vdpa/mlx5: update mlx_features with driver state check (Cindy Lu) [RHEL-127007]
  - redhat/configs: enable CONFIG_AQTION on all archs (Michal Schmidt) [RHEL-150852]
  - mm/migrate: fix sleep in atomic for large folios and buffer heads (Ming Lei) [RHEL-144763]
  - fs/ext4: use sleeping version of sb_find_get_block() (Ming Lei) [RHEL-144763]
  - fs/jbd2: use sleeping version of __find_get_block() (Ming Lei) [RHEL-144763]
  - fs/ocfs2: use sleeping version of __find_get_block() (Ming Lei) [RHEL-144763]
  - fs/buffer: use sleeping version of __find_get_block() (Ming Lei) [RHEL-144763]
  - fs/buffer: introduce sleeping flavors for pagecache lookups (Ming Lei) [RHEL-144763]
  - fs/buffer: split locking for pagecache lookups (Ming Lei) [RHEL-144763]
  - fscrypt: fix left shift underflow when inode->i_blkbits > PAGE_SHIFT (Ming Lei) [RHEL-144763]
  - block: reject bs > ps block devices when THP is disabled (Ming Lei) [RHEL-144763]
  - md: init queue_limits->max_hw_wzeroes_unmap_sectors parameter (Ming Lei) [RHEL-144763]
  - block: don't silently ignore metadata for sync read/write (Ming Lei) [RHEL-144763]
  - bio: use memzero_page() in bio_truncate() (Ming Lei) [RHEL-144763]
  - drbd: init queue_limits->max_hw_wzeroes_unmap_sectors parameter (Ming Lei) [RHEL-144763]
  - ext4: add FALLOC_FL_WRITE_ZEROES support (Ming Lei) [RHEL-144763]
  - block: add FALLOC_FL_WRITE_ZEROES support (Ming Lei) [RHEL-144763]
  - block: factor out common part in blkdev_fallocate() (Ming Lei) [RHEL-144763]
  - fs: introduce FALLOC_FL_WRITE_ZEROES to fallocate (Ming Lei) [RHEL-144763]
  - dm: clear unmap write zeroes limits when disabling write zeroes (Ming Lei) [RHEL-144763]
  - scsi: sd: set max_hw_wzeroes_unmap_sectors if device supports SD_ZERO_*_UNMAP (Ming Lei) [RHEL-144763]
  - nvmet: set WZDS and DRB if device enables unmap write zeroes operation (Ming Lei) [RHEL-144763]
  - nvme: set max_hw_wzeroes_unmap_sectors if device supports DEAC bit (Ming Lei) [RHEL-144763]
  - block: introduce max_{hw|user}_wzeroes_unmap_sectors to queue limits (Ming Lei) [RHEL-144763]
  - ublk: use READ_ONCE() to read struct ublksrv_ctrl_cmd (Ming Lei) [RHEL-144763]
  - block: don't use strcpy to copy blockdev name (Ming Lei) [RHEL-144763]
  - block: allow IOC_PR_READ_* ioctls with BLK_OPEN_READ (Ming Lei) [RHEL-144763]
  - block: fix EOD return for device with nr_sectors == 0 (Ming Lei) [RHEL-144763]
  - block: change blk_get_meta_cap() stub return -ENOIOCTLCMD (Ming Lei) [RHEL-144763]
  - block: fix lbmd_guard_tag_type assignment in FS_IOC_GETLBMD_CAP (Ming Lei) [RHEL-144763]
  - block: fix FS_IOC_GETLBMD_CAP parsing in blkdev_common_ioctl() (Ming Lei) [RHEL-144763]
  - ata: libata-core: Quirk INTEL SSDSC2KG480G8 max_sectors (Ming Lei) [RHEL-144763]
  - ata: libata: Add libata.force parameter max_sec (Ming Lei) [RHEL-144763]
  - ata: libata: Add support to parse equal sign in libata.force (Ming Lei) [RHEL-144763]
  - ata: libata: Change libata.force to use the generic ATA_QUIRK_MAX_SEC quirk (Ming Lei) [RHEL-144763]
  - ata: libata: Add ata_force_get_fe_for_dev() helper (Ming Lei) [RHEL-144763]
  - ata: libata: Add ATA_QUIRK_MAX_SEC and convert all device quirks (Ming Lei) [RHEL-144763]
  - ata: libata-core: Quirk DELLBOSS VD max_sectors (Ming Lei) [RHEL-144763]
  - loop: revert exclusive opener loop status change (Ming Lei) [RHEL-144763]
  - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (Ming Lei) [RHEL-144763]
  - nvme-pci: handle changing device dma map requirements (Ming Lei) [RHEL-144763]
  - nvme-pci: DMA unmap the correct regions in nvme_free_sgls (Ming Lei) [RHEL-144763]
  - Revert "rnbd-clt: fix refcount underflow in device unmap path" (Ming Lei) [RHEL-144763]
  - blk-mq: use BLK_POLL_ONESHOT for synchronous poll completion (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix garbage output in foreground mode (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix error handling for starting device (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix IO thread idle check (Ming Lei) [RHEL-144763]
  - block: make the new blkzoned UAPI constants discoverable (Ming Lei) [RHEL-144763]
  - ublk: fix ublksrv pid handling for pid namespaces (Ming Lei) [RHEL-144763]
  - block: Fix an error path in disk_update_zone_resources() (Ming Lei) [RHEL-144763]
  - rnbd-clt: fix refcount underflow in device unmap path (Ming Lei) [RHEL-144763]
  - nvmet: do not copy beyond sybsysnqn string length (Ming Lei) [RHEL-144763]
  - null_blk: fix kmemleak by releasing references to fault configfs items (Ming Lei) [RHEL-144763]
  - block: zero non-PI portion of auto integrity buffer (Ming Lei) [RHEL-144763]
  - nvme-fc: release admin tagset if init fails (Ming Lei) [RHEL-144763]
  - nvme-pci: disable secondary temp for Wodposit WPBSNM8 (Ming Lei) [RHEL-144763]
  - ublk: fix use-after-free in ublk_partition_scan_work (Ming Lei) [RHEL-144763]
  - blk-mq: avoid stall during boot due to synchronize_rcu_expedited (Ming Lei) [RHEL-144763]
  - loop: add missing bd_abort_claiming in loop_set_status (Ming Lei) [RHEL-144763]
  - block: don't merge bios with different app_tags (Ming Lei) [RHEL-144763]
  - blk-rq-qos: Remove unlikely() hints from QoS checks (Ming Lei) [RHEL-144763]
  - loop: don't change loop device under exclusive opener in loop_set_status (Ming Lei) [RHEL-144763]
  - block, bfq: update outdated comment (Ming Lei) [RHEL-144763]
  - selftests/ublk: fix Makefile to rebuild on header changes (Ming Lei) [RHEL-144763]
  - selftests/ublk: add test for async partition scan (Ming Lei) [RHEL-144763]
  - ublk: scan partition in async way (Ming Lei) [RHEL-144763]
  - block,bfq: fix aux stat accumulation destination (Ming Lei) [RHEL-144763]
  - block: rnbd-clt: Fix signedness bug in init_dev() (Ming Lei) [RHEL-144763]
  - ublk: clean up user copy references on ublk server exit (Ming Lei) [RHEL-144763]
  - block: validate interval_exp integrity limit (Ming Lei) [RHEL-144763]
  - block: validate pi_offset integrity limit (Ming Lei) [RHEL-144763]
  - block: rnbd-clt: Fix leaked ID in init_dev() (Ming Lei) [RHEL-144763]
  - ublk: fix deadlock when reading partition table (Ming Lei) [RHEL-144763]
  - block: add allocation size check in blkdev_pr_read_keys() (Ming Lei) [RHEL-144763]
  - Documentation: admin-guide: blockdev: replace zone_capacity with zone_capacity_mb when creating devices (Ming Lei) [RHEL-144763]
  - zloop: use READ_ONCE() to read lo->lo_state in queue_rq path (Ming Lei) [RHEL-144763]
  - loop: use READ_ONCE() to read lo->lo_state without locking (Ming Lei) [RHEL-144763]
  - selftests: ublk: add user copy test cases (Ming Lei) [RHEL-144763]
  - selftests: ublk: add support for user copy to kublk (Ming Lei) [RHEL-144763]
  - selftests: ublk: forbid multiple data copy modes (Ming Lei) [RHEL-144763]
  - selftests: ublk: don't share backing files between ublk servers (Ming Lei) [RHEL-144763]
  - selftests: ublk: use auto_zc for PER_IO_DAEMON tests in stress_04 (Ming Lei) [RHEL-144763]
  - selftests: ublk: fix fio arguments in run_io_and_recover() (Ming Lei) [RHEL-144763]
  - selftests: ublk: remove unused ios map in seq_io.bt (Ming Lei) [RHEL-144763]
  - selftests: ublk: correct last_rw map type in seq_io.bt (Ming Lei) [RHEL-144763]
  - selftests: ublk: fix overflow in ublk_queue_auto_zc_fallback() (Ming Lei) [RHEL-144763]
  - block: move around bio flagging helpers (Ming Lei) [RHEL-144763]
  - blk-mq-dma: always initialize dma state (Ming Lei) [RHEL-144763]
  - blk-mq: delete task running check in blk_hctx_poll() (Ming Lei) [RHEL-144763]
  - block: fix cached zone reports on devices with native zone append (Ming Lei) [RHEL-144763]
  - ublk: don't mutate struct bio_vec in iteration (Ming Lei) [RHEL-144763]
  - block: prohibit calls to bio_chain_endio (Ming Lei) [RHEL-144763]
  - ublk: allow non-blocking ctrl cmds in IO_URING_F_NONBLOCK issue (Ming Lei) [RHEL-144763]
  - nvme-fabrics: add ENOKEY to no retry criteria for authentication failures (Ming Lei) [RHEL-144763]
  - nvme-auth: use kvfree() for memory allocated with kvcalloc() (Ming Lei) [RHEL-144763]
  - nvmet-tcp: use kvcalloc for commands array (Ming Lei) [RHEL-144763]
  - nvmet-rdma: use kvcalloc for commands and responses arrays (Ming Lei) [RHEL-144763]
  - nvme: fix typo error in nvme target (Ming Lei) [RHEL-144763]
  - nvmet-fc: use pr_* print macros instead of dev_* (Ming Lei) [RHEL-144763]
  - nvmet-fcloop: remove unused lsdir member. (Ming Lei) [RHEL-144763]
  - nvmet-fcloop: check all request and response have been processed (Ming Lei) [RHEL-144763]
  - nvme-fc: check all request and response have been processed (Ming Lei) [RHEL-144763]
  - block: fix comment for op_is_zone_mgmt() to include RESET_ALL (Ming Lei) [RHEL-144763]
  - block: Clear BLK_ZONE_WPLUG_PLUGGED when aborting plugged BIOs (Ming Lei) [RHEL-144763]
  - blk-mq: add blk_rq_nr_bvec() helper (Ming Lei) [RHEL-144763]
  - block: add IOC_PR_READ_RESERVATION ioctl (Ming Lei) [RHEL-144763]
  - block: add IOC_PR_READ_KEYS ioctl (Ming Lei) [RHEL-144763]
  - nvme: reject invalid pr_read_keys() num_keys values (Ming Lei) [RHEL-144763]
  - scsi: sd: reject invalid pr_read_keys() num_keys values (Ming Lei) [RHEL-144763]
  - block: enable per-cpu bio cache by default (Ming Lei) [RHEL-144763]
  - block: use bio_alloc_bioset for passthru IO by default (Ming Lei) [RHEL-144763]
  - nvme-fc: don't hold rport lock when putting ctrl (Ming Lei) [RHEL-144763]
  - nvme-pci: add debug message on fail to read CSTS (Ming Lei) [RHEL-144763]
  - nvme-pci: print error message on failure in nvme_probe (Ming Lei) [RHEL-144763]
  - nvmet: pci-epf: fix DMA channel debug print (Ming Lei) [RHEL-144763]
  - nvmet: pci-epf: move DMA initialization to EPC init callback (Ming Lei) [RHEL-144763]
  - nvmet: remove redundant subsysnqn field from ctrl (Ming Lei) [RHEL-144763]
  - nvmet: add sanity checks when freeing subsystem (Ming Lei) [RHEL-144763]
  - block/rnbd: correct all kernel-doc complaints (Ming Lei) [RHEL-144763]
  - blk-mq: use queue_hctx in blk_mq_map_queue_type (Ming Lei) [RHEL-144763]
  - sbitmap: fix all kernel-doc warnings (Ming Lei) [RHEL-144763]
  - ublk: add helper of __ublk_fetch() (Ming Lei) [RHEL-144763]
  - ublk: pass const pointer to ublk_queue_is_zoned() (Ming Lei) [RHEL-144763]
  - ublk: refactor auto buffer register in ublk_dispatch_req() (Ming Lei) [RHEL-144763]
  - ublk: add `union ublk_io_buf` with improved naming (Ming Lei) [RHEL-144763]
  - ublk: add parameter `struct io_uring_cmd *` to ublk_prep_auto_buf_reg() (Ming Lei) [RHEL-144763]
  - kfifo: add kfifo_alloc_node() helper for NUMA awareness (Ming Lei) [RHEL-144763]
  - blk-mq: fix potential uaf for 'queue_hw_ctx' (Ming Lei) [RHEL-144763]
  - blk-mq: use array manage hctx map instead of xarray (Ming Lei) [RHEL-144763]
  - ublk: prevent invalid access with DEBUG (Ming Lei) [RHEL-144763]
  - s390/dasd: Use scnprintf() instead of sprintf() (Ming Lei) [RHEL-144763]
  - s390/dasd: Move device name formatting into separate function (Ming Lei) [RHEL-144763]
  - s390/dasd: Remove unnecessary debugfs_create() return checks (Ming Lei) [RHEL-144763]
  - s390/dasd: Fix gendisk parent after copy pair swap (Ming Lei) [RHEL-144763]
  - block: ignore __blkdev_issue_discard() return value (Ming Lei) [RHEL-144763]
  - block: fix typos in comments and strings in blk-core (Ming Lei) [RHEL-144763]
  - block: Remove references to __device_add_disk() (Ming Lei) [RHEL-144763]
  - Revert "Merge branch 'loop-aio-nowait' into for-6.19/block" (Ming Lei) [RHEL-144763]
  - block: use min() instead of min_t() (Ming Lei) [RHEL-144763]
  - zloop: clear nowait flag in workqueue context (Ming Lei) [RHEL-144763]
  - loop: clear nowait flag in workqueue context (Ming Lei) [RHEL-144763]
  - zloop: fix zone append check in zloop_rw() (Ming Lei) [RHEL-144763]
  - MAINTAINERS: add a maintainer for zoned block device support (Ming Lei) [RHEL-144763]
  - MAINTAINERS: add missing block layer user API header files (Ming Lei) [RHEL-144763]
  - block: remove the declaration of elevator_init_mq function (Ming Lei) [RHEL-144763]
  - Revert "block: consider discard merge last" (Ming Lei) [RHEL-144763]
  - fs: Add the __data_racy annotation to backing_dev_info.ra_pages (Ming Lei) [RHEL-144763]
  - block: plug attempts to batch allocate tags multiple times (Ming Lei) [RHEL-144763]
  - loop: add hint for handling aio via IOCB_NOWAIT (Ming Lei) [RHEL-144763]
  - loop: try to handle loop aio command via NOWAIT IO first (Ming Lei) [RHEL-144763]
  - loop: move command blkcg/memcg initialization into loop_queue_work (Ming Lei) [RHEL-144763]
  - loop: add lo_submit_rw_aio() (Ming Lei) [RHEL-144763]
  - loop: add helper lo_rw_aio_prep() (Ming Lei) [RHEL-144763]
  - loop: add helper lo_cmd_nr_bvec() (Ming Lei) [RHEL-144763]
  - drbd: turn bitmap I/O comments into regular block comments (Ming Lei) [RHEL-144763]
  - block: rate-limit capacity change info log (Ming Lei) [RHEL-144763]
  - Documentation: admin-guide: blockdev: update zloop parameters (Ming Lei) [RHEL-144763]
  - zloop: introduce the ordered_zone_append configuration parameter (Ming Lei) [RHEL-144763]
  - zloop: introduce the zone_append configuration parameter (Ming Lei) [RHEL-144763]
  - zloop: simplify checks for writes to sequential zones (Ming Lei) [RHEL-144763]
  - zloop: fail zone append operations that are targeting full zones (Ming Lei) [RHEL-144763]
  - zloop: make the write pointer of full zones invalid (Ming Lei) [RHEL-144763]
  - block/blk-throttle: Remove throtl_slice from struct throtl_data (Ming Lei) [RHEL-144763]
  - block/blk-throttle: drop unneeded blk_stat_enable_accounting (Ming Lei) [RHEL-144763]
  - block/blk-throttle: Fix throttle slice time for SSDs (Ming Lei) [RHEL-144763]
  - block: consider discard merge last (Ming Lei) [RHEL-144763]
  - floppy: fix for PAGE_SIZE != 4KB (Ming Lei) [RHEL-144763]
  - ps3disk: use memcpy_{from,to}_bvec index (Ming Lei) [RHEL-144763]
  - block-dma: properly take MMIO path (Ming Lei) [RHEL-144763]
  - nvme-pci: migrate to dma_map_phys instead of map_page (Ming Lei) [RHEL-144763]
  - block: define alloc_sched_data and free_sched_data methods for kyber (Ming Lei) [RHEL-144763]
  - block: use {alloc|free}_sched data methods (Ming Lei) [RHEL-144763]
  - block: introduce alloc_sched_data and free_sched_data elevator methods (Ming Lei) [RHEL-144763]
  - block: move elevator tags into struct elevator_resources (Ming Lei) [RHEL-144763]
  - block: unify elevator tags and type xarrays into struct elv_change_ctx (Ming Lei) [RHEL-144763]
  - dm: fix zone reset all operation processing (Ming Lei) [RHEL-144763]
  - block: fix NULL pointer dereference in disk_report_zones() (Ming Lei) [RHEL-144763]
  - block: fix NULL pointer dereference in blk_zone_reset_all_bio_endio() (Ming Lei) [RHEL-144763]
  - blk-zoned: Move code from disk_zone_wplug_add_bio() into its caller (Ming Lei) [RHEL-144763]
  - blk-zoned: Document disk_zone_wplug_schedule_bio_work() locking (Ming Lei) [RHEL-144763]
  - blk-zoned: Fix a typo in a source code comment (Ming Lei) [RHEL-144763]
  - null_blk: fix zone read length beyond write pointer (Ming Lei) [RHEL-144763]
  - blk-mq-dma: fix kernel-doc function name for integrity DMA iterator (Ming Lei) [RHEL-144763]
  - block: fix merging data-less bios (Ming Lei) [RHEL-144763]
  - ublk: return unsigned from ublk_{,un}map_io() (Ming Lei) [RHEL-144763]
  - ublk: remove unnecessary checks in ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - block: add lockdep to queue_limits_commit_update() (Ming Lei) [RHEL-144763]
  - nbd: defer config unlock in nbd_genl_connect (Ming Lei) [RHEL-144763]
  - block: clean up indentation in blk_rq_map_iter_init() (Ming Lei) [RHEL-144763]
  - nbd: defer config put in recv_work (Ming Lei) [RHEL-144763]
  - block: introduce bdev_zone_start() (Ming Lei) [RHEL-144763]
  - block: refactor disk_zone_wplug_sync_wp_offset() (Ming Lei) [RHEL-144763]
  - block: improve blk_zone_wp_offset() (Ming Lei) [RHEL-144763]
  - block: don't return 1 for the fallback case in blkdev_get_zone_info (Ming Lei) [RHEL-144763]
  - nvme: remove virtual boundary for sgl capable devices (Ming Lei) [RHEL-144763]
  - block: accumulate memory segment gaps per bio (Ming Lei) [RHEL-144763]
  - virtio_blk: NULL out vqs to avoid double free on failed resume (Ming Lei) [RHEL-144763]
  - null_blk: allow byte aligned memory offsets (Ming Lei) [RHEL-144763]
  - null_blk: single kmap per bio segment (Ming Lei) [RHEL-144763]
  - null_blk: use memzero_page() (Ming Lei) [RHEL-144763]
  - null_blk: consistently use blk_status_t (Ming Lei) [RHEL-144763]
  - null_blk: simplify copy_from_nullb (Ming Lei) [RHEL-144763]
  - ublk: use rq_for_each_segment() for user copy (Ming Lei) [RHEL-144763]
  - ublk: use copy_{to,from}_iter() for user copy (Ming Lei) [RHEL-144763]
  - block: fix cached zone reporting after zone append was used (Ming Lei) [RHEL-144763]
  - block: don't leak disk->zones_cond for !disk_need_zone_resources (Ming Lei) [RHEL-144763]
  - xfs: use blkdev_report_zones_cached() (Ming Lei) [RHEL-144763]
  - block: add zone write plug condition to debugfs zone_wplugs (Ming Lei) [RHEL-144763]
  - block: improve zone_wplugs debugfs attribute output (Ming Lei) [RHEL-144763]
  - block: introduce BLKREPORTZONESV2 ioctl (Ming Lei) [RHEL-144763]
  - block: introduce blkdev_report_zones_cached() (Ming Lei) [RHEL-144763]
  - block: introduce blkdev_get_zone_info() (Ming Lei) [RHEL-144763]
  - block: refactor blkdev_report_zones() code (Ming Lei) [RHEL-144763]
  - block: track zone conditions (Ming Lei) [RHEL-144763]
  - block: use zone condition to determine conventional zones (Ming Lei) [RHEL-144763]
  - block: reorganize struct blk_zone_wplug (Ming Lei) [RHEL-144763]
  - block: introduce disk_report_zone() (Ming Lei) [RHEL-144763]
  - block: cleanup blkdev_report_zones() (Ming Lei) [RHEL-144763]
  - block: freeze queue when updating zone resources (Ming Lei) [RHEL-144763]
  - block: handle zone management operations completions (Ming Lei) [RHEL-144763]
  - block: make bio auto-integrity deadlock safe (Ming Lei) [RHEL-144763]
  - block: blocking mempool_alloc doesn't fail (Ming Lei) [RHEL-144763]
  - selftests: ublk: make ublk_thread thread-local variable (Ming Lei) [RHEL-144763]
  - selftests: ublk: set CPU affinity before thread initialization (Ming Lei) [RHEL-144763]
  - ublk: use struct_size() for allocation (Ming Lei) [RHEL-144763]
  - ublk: implement NUMA-aware memory allocation (Ming Lei) [RHEL-144763]
  - ublk: reorder tag_set initialization before queue allocation (Ming Lei) [RHEL-144763]
  - blktrace: add support for REQ_OP_WRITE_ZEROES tracing (Ming Lei) [RHEL-144763]
  - drbd: replace kmap() with kmap_local_page() in receiver path (Ming Lei) [RHEL-144763]
  - blktrace: for ftrace use correct trace format ver (Ming Lei) [RHEL-144763]
  - blktrace: use debug print to report dropped events (Ming Lei) [RHEL-144763]
  - blktrace: handle BLKTRACESETUP2 ioctl (Ming Lei) [RHEL-144763]
  - blktrace: trace zone write plugging operations (Ming Lei) [RHEL-144763]
  - blktrace: expose ZONE APPEND completions to blktrace (Ming Lei) [RHEL-144763]
  - blktrace: add block trace commands for zone operations (Ming Lei) [RHEL-144763]
  - blktrace: move ftrace blk_io_tracer to blk_io_trace2 (Ming Lei) [RHEL-144763]
  - blktrace: move trace_note to blk_io_trace2 (Ming Lei) [RHEL-144763]
  - blktrace: differentiate between blk_io_trace versions (Ming Lei) [RHEL-144763]
  - blktrace: add definitions for struct blk_io_trace2 (Ming Lei) [RHEL-144763]
  - blktrace: pass blk_user_trace2 to setup functions (Ming Lei) [RHEL-144763]
  - blktrace: add definitions for blk_user_trace_setup2 (Ming Lei) [RHEL-144763]
  - blktrace: split do_blk_trace_setup into two functions (Ming Lei) [RHEL-144763]
  - blktrace: change the internal action to 64bit (Ming Lei) [RHEL-144763]
  - blktrace: untangle if/else sequence in __blk_add_trace (Ming Lei) [RHEL-144763]
  - blktrace: split out relaying a blktrace event (Ming Lei) [RHEL-144763]
  - blktrace: factor out recording a blktrace event (Ming Lei) [RHEL-144763]
  - blktrace: only calculate trace length once (Ming Lei) [RHEL-144763]
  - block: rename min_segment_size (Ming Lei) [RHEL-144763]
  - blk-mq: use struct_size() in kmalloc() (Ming Lei) [RHEL-144763]
  - block/mq-deadline: Switch back to a single dispatch list (Ming Lei) [RHEL-144763]
  - block/mq-deadline: Introduce dd_start_request() (Ming Lei) [RHEL-144763]
  - nvme-multipath: fix lockdep WARN due to partition scan work (Ming Lei) [RHEL-144763]
  - MAINTAINERS: correct git location for block layer tree (Ming Lei) [RHEL-144763]
  - null_blk: set dma alignment to logical block size (Ming Lei) [RHEL-144763]
  - blk-crypto: use BLK_STS_INVAL for alignment errors (Ming Lei) [RHEL-144763]
  - block: make REQ_OP_ZONE_OPEN a write operation (Ming Lei) [RHEL-144763]
  - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL (Ming Lei) [RHEL-144763]
  - nvme-pci: use blk_map_iter for p2p metadata (Ming Lei) [RHEL-144763]
  - block: require LBA dma_alignment when using PI (Ming Lei) [RHEL-144763]
  - block: Remove elevator_lock usage from blkg_conf frozen operations (Ming Lei) [RHEL-144763]
  - blk-mq: fix stale tag depth for shared sched tags in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - loop: remove redundant __GFP_NOWARN flag (Ming Lei) [RHEL-144763]
  - block: move bio_iov_iter_get_bdev_pages to block/fops.c (Ming Lei) [RHEL-144763]
  - iomap: open code bio_iov_iter_get_bdev_pages (Ming Lei) [RHEL-144763]
  - block: rename bio_iov_iter_get_pages_aligned to bio_iov_iter_get_pages (Ming Lei) [RHEL-144763]
  - block: remove bio_iov_iter_get_pages (Ming Lei) [RHEL-144763]
  - block: Update a comment of disk statistics (Ming Lei) [RHEL-144763]
  - s390/dasd: enforce dma_alignment to ensure proper buffer validation (Ming Lei) [RHEL-144763]
  - s390/dasd: Return BLK_STS_INVAL for EINVAL from do_dasd_request (Ming Lei) [RHEL-144763]
  - ublk: remove redundant zone op check in ublk_setup_iod() (Ming Lei) [RHEL-144763]
  - nvme: Use non zero KATO for persistent discovery connections (Ming Lei) [RHEL-144763]
  - nvmet: add safety check for subsys lock (Ming Lei) [RHEL-144763]
  - nvme-core: use nvme_is_io_ctrl() for I/O controller check (Ming Lei) [RHEL-144763]
  - nvme-core: do ioccsz/iorcsz validation only for I/O controllers (Ming Lei) [RHEL-144763]
  - nvme-core: add method to check for an I/O controller (Ming Lei) [RHEL-144763]
  - blk-mq: Fix more tag iteration function documentation (Ming Lei) [RHEL-144763]
  - selftests: ublk: fix behavior when fio is not installed (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_unmap_io() (Ming Lei) [RHEL-144763]
  - ublk: pass ublk_io to __ublk_complete_rq() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_need_complete_req() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_check_commit_and_fetch() (Ming Lei) [RHEL-144763]
  - ublk: don't pass ublk_queue to ublk_fetch() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_config_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_check_fetch_buf() (Ming Lei) [RHEL-144763]
  - ublk: pass q_id and tag to __ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_daemon_register_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: don't access ublk_queue in ublk_register_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: pass ublk_device to ublk_register_io_buf() (Ming Lei) [RHEL-144763]
  - ublk: don't dereference ublk_queue in ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - ublk: don't dereference ublk_queue in ublk_ch_uring_cmd_local() (Ming Lei) [RHEL-144763]
  - ublk: add helpers to check ublk_device flags (Ming Lei) [RHEL-144763]
  - ublk: don't pass ublk_queue to __ublk_fail_req() (Ming Lei) [RHEL-144763]
  - ublk: don't pass q_id to ublk_queue_cmd_buf_size() (Ming Lei) [RHEL-144763]
  - ublk: remove ubq check in ublk_check_and_get_req() (Ming Lei) [RHEL-144763]
  - selftests: ublk: add test to verify that feat_map is complete (Ming Lei) [RHEL-144763]
  - selftests: ublk: kublk: add UBLK_F_BUF_REG_OFF_DAEMON to feat_map (Ming Lei) [RHEL-144763]
  - selftests: ublk: kublk: simplify feat_map definition (Ming Lei) [RHEL-144763]
  - blk-throttle: fix throtl_data leak during disk release (Ming Lei) [RHEL-144763]
  - blk-mq: Fix the blk_mq_tagset_busy_iter() documentation (Ming Lei) [RHEL-144763]
  - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk (Ming Lei) [RHEL-144763]
  - block/mq-deadline: Remove the redundant rb_entry_rq in the deadline_from_pos(). (Ming Lei) [RHEL-144763]
  - nvme-fc: use lock accessing port_state and rport state (Ming Lei) [RHEL-144763]
  - nvmet-fcloop: call done callback even when remote port is gone (Ming Lei) [RHEL-144763]
  - nvmet-fc: avoid scheduling association deletion twice (Ming Lei) [RHEL-144763]
  - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op (Ming Lei) [RHEL-144763]
  - blk-mq: fix stale nr_requests documentation (Ming Lei) [RHEL-144763]
  - blk-mq: remove blk_mq_tag_update_depth() (Ming Lei) [RHEL-144763]
  - blk-mq: fix potential deadlock while nr_requests grown (Ming Lei) [RHEL-144763]
  - blk-mq-sched: add new parameter nr_requests in blk_mq_alloc_sched_tags() (Ming Lei) [RHEL-144763]
  - blk-mq: split bitmap grow and resize case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - blk-mq: cleanup shared tags case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - blk-mq: convert to serialize updating nr_requests with update_nr_hwq_lock (Ming Lei) [RHEL-144763]
  - blk-mq: check invalid nr_requests in queue_requests_store() (Ming Lei) [RHEL-144763]
  - blk-mq: remove useless checkings in blk_mq_update_nr_requests() (Ming Lei) [RHEL-144763]
  - blk-mq: remove useless checking in queue_requests_store() (Ming Lei) [RHEL-144763]
  - ublk: consolidate nr_io_ready and nr_queues_ready (Ming Lei) [RHEL-144763]
  - block: fix ordering of recursive split IO (Ming Lei) [RHEL-144763]
  - block: skip unnecessary checks for split bio (Ming Lei) [RHEL-144763]
  - blk-crypto: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-144763]
  - block: factor out a helper bio_submit_split_bioset() (Ming Lei) [RHEL-144763]
  - blk-crypto: fix missing blktrace bio split events (Ming Lei) [RHEL-144763]
  - blk-mq: add QUEUE_FLAG_BIO_ISSUE_TIME (Ming Lei) [RHEL-144763]
  - block: initialize bio issue time in blk_mq_submit_bio() (Ming Lei) [RHEL-144763]
  - block: cleanup bio_issue (Ming Lei) [RHEL-144763]
  - blk-map: provide the bdev to bio if one exists (Ming Lei) [RHEL-144763]
  - blk-mq-dma: bring back p2p request flags (Ming Lei) [RHEL-144763]
  - blk-integrity: enable p2p source and destination (Ming Lei) [RHEL-144763]
  - iov_iter: remove iov_iter_is_aligned (Ming Lei) [RHEL-144763]
  - blk-integrity: use simpler alignment check (Ming Lei) [RHEL-144763]
  - block: remove bdev_iter_is_aligned (Ming Lei) [RHEL-144763]
  - iomap: simplify direct io validity check (Ming Lei) [RHEL-144763]
  - block: simplify direct io validity check (Ming Lei) [RHEL-144763]
  - block: align the bio after building it (Ming Lei) [RHEL-144763]
  - block: add size alignment to bio_iov_iter_get_pages (Ming Lei) [RHEL-144763]
  - block: check for valid bio while splitting (Ming Lei) [RHEL-144763]
  - drivers/block: WQ_PERCPU added to alloc_workqueue users (Ming Lei) [RHEL-144763]
  - drivers/block: replace use of system_unbound_wq with system_dfl_wq (Ming Lei) [RHEL-144763]
  - drivers/block: replace use of system_wq with system_percpu_wq (Ming Lei) [RHEL-144763]
  - block: floppy: Replace kmalloc() + copy_from_user() with memdup_user() (Ming Lei) [RHEL-144763]
  - block: remove the bi_inline_vecs variable sized array from struct bio (Ming Lei) [RHEL-144763]
  - block: add a bio_init_inline helper (Ming Lei) [RHEL-144763]
  - blk-throttle: fix access race during throttle policy activation (Ming Lei) [RHEL-144763]
  - null_blk: Fix the description of the cache_size module argument (Ming Lei) [RHEL-144763]
  - ublk: inline __ublk_ch_uring_cmd() (Ming Lei) [RHEL-144763]
  - block: use int to store blk_stack_limits() return value (Ming Lei) [RHEL-144763]
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx (Ming Lei) [RHEL-144763]
  - floppy: Sort headers alphabetically (Ming Lei) [RHEL-144763]
  - floppy: Replace custom SZ_64K constant (Ming Lei) [RHEL-144763]
  - floppy: Remove unused CROSS_64KB() macro from arch/ code (Ming Lei) [RHEL-144763]
  - block: Move a misplaced comment in queue_wb_lat_store() (Ming Lei) [RHEL-144763]
  - nvme-pci: convert metadata mapping to dma iter (Ming Lei) [RHEL-144763]
  - nvme-pci: create common sgl unmapping helper (Ming Lei) [RHEL-144763]
  - blk-integrity: use iterator for mapping sg (Ming Lei) [RHEL-144763]
  - blk-mq-dma: add scatter-less integrity data DMA mapping (Ming Lei) [RHEL-144763]
  - blk-mq-dma: move common dma start code to a helper (Ming Lei) [RHEL-144763]
  - blk-mq: remove REQ_P2PDMA flag (Ming Lei) [RHEL-144763]
  - blk-mq-dma: require unmap caller provide p2p map type (Ming Lei) [RHEL-144763]
  - blk-mq-dma: provide the bio_vec array being iterated (Ming Lei) [RHEL-144763]
  - blk-mq-dma: create blk_map_iter type (Ming Lei) [RHEL-144763]
  - block: switch ->getgeo() to struct gendisk (Ming Lei) [RHEL-144763]
  - scsi: switch ->bios_param() to passing gendisk (Ming Lei) [RHEL-144763]
  - scsi: switch scsi_bios_ptable() and scsi_partsize() to gendisk (Ming Lei) [RHEL-144763]
  - nvme: fix PI insert on write (Ming Lei) [RHEL-144763]
  - blk-zoned: Fix a lockdep complaint about recursive locking (Ming Lei) [RHEL-144763]
  - loop: fix zero sized loop for block special file (Ming Lei) [RHEL-144763]
  - block: tone down bio_check_eod (Ming Lei) [RHEL-144763]
  - loop: use vfs_getattr_nosec for accurate file size (Ming Lei) [RHEL-144763]
  - loop: Consolidate size calculation logic into lo_calculate_size() (Ming Lei) [RHEL-144763]
  - block: remove newlines from the warnings in blk_validate_integrity_limits (Ming Lei) [RHEL-144763]
  - block: handle pi_tuple_size in queue_limits_stack_integrity (Ming Lei) [RHEL-144763]
  - fs: add ioctl to query metadata and protection info capabilities (Ming Lei) [RHEL-144763]
  - nvme: set pi_offset only when checksum type is not BLK_INTEGRITY_CSUM_NONE (Ming Lei) [RHEL-144763]
  - block: introduce pi_tuple_size field in blk_integrity (Ming Lei) [RHEL-144763]
  - block: rename tuple_size field in blk_integrity to metadata_size (Ming Lei) [RHEL-144763]
  - block: always allocate integrity buffer when required (Ming Lei) [RHEL-144763]
  - Docs: admin-guide: Correct spelling mistake (Ming Lei) [RHEL-144763]
  - blk-wbt: doc: Update the doc of the wbt_lat_usec interface (Ming Lei) [RHEL-144763]
  - blk-wbt: Eliminate ambiguity in the comments of struct rq_wb (Ming Lei) [RHEL-144763]
  - blk-wbt: Optimize wbt_done() for non-throttled writes (Ming Lei) [RHEL-144763]
  - blk-cgroup: remove redundant __GFP_NOWARN (Ming Lei) [RHEL-144763]
  - block, bfq: remove redundant __GFP_NOWARN (Ming Lei) [RHEL-144763]
  - drbd: Remove the open-coded page pool (Ming Lei) [RHEL-144763]
  - nvmet: exit debugfs after discovery subsystem exits (Ming Lei) [RHEL-144763]
  - block, bfq: Reorder struct bfq_iocq_bfqq_data (Ming Lei) [RHEL-144763]
  - block: ensure discard_granularity is zero when discard is not supported (Ming Lei) [RHEL-144763]
  - block: Fix default IO priority if there is no IO context (Ming Lei) [RHEL-144763]
  - nvme: fix various comment typos (Ming Lei) [RHEL-144763]
  - nvme-pci: fix leak on sgl setup error (Ming Lei) [RHEL-144763]
  - nvmet: initialize discovery subsys after debugfs is initialized (Ming Lei) [RHEL-144763]
  - nvme: add capability to connect to an administrative controller (Ming Lei) [RHEL-144763]
  - nvmet: add support for FDP in fabrics passthru path (Ming Lei) [RHEL-144763]
  - blk-ioc: don't hold queue_lock for ioc_lookup_icq() (Ming Lei) [RHEL-144763]
  - block: Enforce power-of-2 physical block size (Ming Lei) [RHEL-144763]
  - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (Ming Lei) [RHEL-144763]
  - block: Improve read ahead size for rotational devices (Ming Lei) [RHEL-144763]
  - cdrom: Call cdrom_mrw_exit from cdrom_release function (Ming Lei) [RHEL-144763]
  - sunvdc: Balance device refcount in vdc_port_mpgroup_check (Ming Lei) [RHEL-144763]
  - nvme-pci: try function level reset on init failure (Ming Lei) [RHEL-144763]
  - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails (Ming Lei) [RHEL-144763]
  - nvme: fix typo in status code constant for self-test in progress (Ming Lei) [RHEL-144763]
  - nvmet: remove redundant assignment of error code in nvmet_ns_enable() (Ming Lei) [RHEL-144763]
  - nvme: fix incorrect variable in io cqes error message (Ming Lei) [RHEL-144763]
  - nvme: fix multiple spelling and grammar issues in host drivers (Ming Lei) [RHEL-144763]
  - block: fix blk_zone_append_update_request_bio() kernel-doc (Ming Lei) [RHEL-144763]
  - block: add trace messages to zone write plugging (Ming Lei) [RHEL-144763]
  - block: add tracepoint for blkdev_zone_mgmt (Ming Lei) [RHEL-144763]
  - block: add tracepoint for blk_zone_update_request_bio (Ming Lei) [RHEL-144763]
  - block: split blk_zone_update_request_bio into two functions (Ming Lei) [RHEL-144763]
  - blktrace: add zoned block commands to blk_fill_rwbs (Ming Lei) [RHEL-144763]
  - block: floppy: Fix uninitialized use of outparam (Ming Lei) [RHEL-144763]
  - loop: Avoid updating block size under exclusive owner (Ming Lei) [RHEL-144763]
  - nvme-pci: don't allocate dma_vec for IOVA mappings (Ming Lei) [RHEL-144763]
  - drbd: add missing kref_get in handle_write_conflicts (Ming Lei) [RHEL-144763]
  - block: mtip32xx: Fix usage of dma_map_sg() (Ming Lei) [RHEL-144763]
  - nvme-pci: fix dma unmapping when using PRPs and not using the IOVA mapping (Ming Lei) [RHEL-144763]
  - zram: pass buffer offset to zcomp_available_show() (Ming Lei) [RHEL-144763]
  - block: zram: replace scnprintf() with sysfs_emit() in *_show() functions (Ming Lei) [RHEL-144763]
  - virtio: blk/scsi: use block layer helpers to calculate num of queues (Ming Lei) [RHEL-144763]
  - scsi: use block layer helpers to calculate num of queues (Ming Lei) [RHEL-144763]
  - nvme-pci: use block layer helpers to calculate num of queues (Ming Lei) [RHEL-144763]
  - lib/group_cpus: Let group_cpu_evenly() return the number of initialized masks (Ming Lei) [RHEL-144763]
  - nvme-pci: rework the build time assert for NVME_MAX_NR_DESCRIPTORS (Ming Lei) [RHEL-144763]
  - nvme-pci: replace NVME_MAX_KB_SZ with NVME_MAX_BYTE (Ming Lei) [RHEL-144763]
  - nvme-pci: convert the data mapping to blk_rq_dma_map (Ming Lei) [RHEL-144763]
  - nvme-pci: remove superfluous arguments (Ming Lei) [RHEL-144763]
  - nvme-pci: merge the simple PRP and SGL setup into a common helper (Ming Lei) [RHEL-144763]
  - nvme-pci: refactor nvme_pci_use_sgls (Ming Lei) [RHEL-144763]
  - block: add scatterlist-less DMA mapping helpers (Ming Lei) [RHEL-144763]
  - block: don't merge different kinds of P2P transfers in a single bio (Ming Lei) [RHEL-144763]
  - block: Increase BLK_DEF_MAX_SECTORS_CAP (Ming Lei) [RHEL-144763]
  - block/bdev: lift block size restrictions to 64k (Ming Lei) [RHEL-144763]
  - block/bdev: enable large folio support for large logical block sizes (Ming Lei) [RHEL-144763]
  - fs/buffer fs/mpage: remove large folio restriction (Ming Lei) [RHEL-144763]
  - fs/mpage: use blocks_per_folio instead of blocks_per_page (Ming Lei) [RHEL-144763]
  - fs/mpage: avoid negative shift for large blocksize (Ming Lei) [RHEL-144763]
  - fs/buffer: remove batching from async read (Ming Lei) [RHEL-144763]
  - fs/buffer: simplify block_read_full_folio() with bh_offset() (Ming Lei) [RHEL-144763]
  - block: don't autoload drivers on stat (Ming Lei) [RHEL-144763]
  - platform/x86/amd/pmf: Use ring buffer to store custom BIOS input values (Steve Best) [RHEL-130539]
  - platform/x86/amd/pmf: Add BIOS_INPUTS_MAX macro to replace hardcoded array size (Steve Best) [RHEL-130539]
  - platform/x86/amd/pmf: Use explicit SET_CMD/GET_CMD flags in amd_pmf_send_cmd() (Steve Best) [RHEL-130539]
  - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails (Steve Best) [RHEL-130538]
  - crypto: ccp - Factor out ring destroy handling to a helper (Steve Best) [RHEL-130538]
  - crypto: ccp - Add an S4 restore flow (Steve Best) [RHEL-130538]
  - crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails (Steve Best) [RHEL-130538]
  - platform/x86/amd/pmf: Prevent TEE errors after hibernate (Steve Best) [RHEL-130538]
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-152916]
  - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-152916]


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-215.el10]
changelog:
  - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT (Aristeu Rozanski) [RHEL-132213]
  - tcp: reclaim 8 bytes in struct request_sock_queue (Guillaume Nault) [RHEL-123211]
  - tcp: move mtu_info to remove two 32bit holes (Guillaume Nault) [RHEL-123211]
  - tcp: move tcp_clean_acked to tcp_sock_read_tx group (Guillaume Nault) [RHEL-123211]
  - tcp: move recvmsg_inq to tcp_sock_read_txrx (Guillaume Nault) [RHEL-123211]
  - tcp: move tcp->rcv_tstamp to tcp_sock_write_txrx group (Guillaume Nault) [RHEL-123211]
  - tcp: remove CACHELINE_ASSERT_GROUP_SIZE() uses (Guillaume Nault) [RHEL-123211]
  - net: move sk->sk_err_soft and sk->sk_sndbuf (Guillaume Nault) [RHEL-123211]
  - net: move sk_uid and sk_protocol to sock_read_tx (Guillaume Nault) [RHEL-123211]
  - tcp: move icsk_clean_acked to a better location (Guillaume Nault) [RHEL-123211]
  - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Jan Stancek) [RHEL-132871]
  - timekeeping: Fix timex status validation for auxiliary clocks (Waiman Long) [RHEL-152433]
  - time/sched_clock: Use ACCESS_PRIVATE() to evaluate hrtimer::function (Waiman Long) [RHEL-152433]
  - hrtimer: Fix trace oddity (Waiman Long) [RHEL-152433]
  - clocksource: Reduce watchdog readout delay limit to prevent false positives (Waiman Long) [RHEL-152433]
  - timekeeping: Adjust the leap state for the correct auxiliary timekeeper (Waiman Long) [RHEL-152433] {CVE-2026-23106}
  - hrtimer: Fix softirq base check in update_needs_ipi() (Waiman Long) [RHEL-152433]
  - time: Fix a few typos in time[r] related code comments (Waiman Long) [RHEL-152433]
  - timers/migration: Remove dead code handling idle CPU checking for remote timers (Waiman Long) [RHEL-152433]
  - timers/migration: Remove unused "cpu" parameter from tmigr_get_group() (Waiman Long) [RHEL-152433]
  - timers/migration: Assert that hotplug preparing CPU is part of stable active hierarchy (Waiman Long) [RHEL-152433]
  - timers/migration: Fix imbalanced NUMA trees (Waiman Long) [RHEL-152433]
  - timers/migration: Remove locking on group connection (Waiman Long) [RHEL-152433]
  - timers/migration: Convert "while" loops to use "for" (Waiman Long) [RHEL-152433]
  - timekeeping: Fix error code in tk_aux_sysfs_init() (Waiman Long) [RHEL-152433]
  - timers: Fix NULL function pointer race in timer_shutdown_sync() (Waiman Long) [RHEL-152433] {CVE-2025-68214}
  - timekeeping: Fix resource leak in tk_aux_sysfs_init() error paths (Waiman Long) [RHEL-152433]
  - tick/sched: Fix bogus condition in report_idle_softirq() (Waiman Long) [RHEL-152433]
  - timekeeping: Fix aux clocks sysfs initialization loop bound (Waiman Long) [RHEL-152433]
  - time: export timespec64_add_safe() symbol (Waiman Long) [RHEL-152433]
  - time: Build generic update_vsyscall() only with generic time vDSO (Waiman Long) [RHEL-152433]
  - time/sched_clock: Export symbol for sched_clock register function (Waiman Long) [RHEL-152433]
  - time: Fix spelling mistakes in comments (Waiman Long) [RHEL-152433]
  - clocksource: Print durations for sync check unconditionally (Waiman Long) [RHEL-152433]
  - hrtimer: Reorder branches in hrtimer_clockid_to_base() (Waiman Long) [RHEL-152433]
  - hrtimer: Remove hrtimer_clock_base:: Get_time (Waiman Long) [RHEL-152433]
  - hrtimer: Use hrtimer_cb_get_time() helper (Waiman Long) [RHEL-152433]
  - media: pwm-ir-tx: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - lib: test_objpool: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - sched/core: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - timers/itimer: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - posix-timers: Avoid direct access to hrtimer clockbase (Waiman Long) [RHEL-152433]
  - jiffies: Remove obsolete SHIFTED_HZ comment (Waiman Long) [RHEL-152433]
  - copy_process: pass clone_flags as u64 across calltree (Waiman Long) [RHEL-152433]
  - hrtimers: Unconditionally update target CPU base after offline timer migration (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Avoid slow division loop in auxiliary clock update (Waiman Long) [RHEL-152433]
  - clocksource: Improve randomness in clocksource_verify_choose_cpus() (Waiman Long) [RHEL-152433]
  - cpumask: introduce cpumask_random() (Waiman Long) [RHEL-152433]
  - bitmap: generalize node_random() (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Update auxiliary clock data in the datapage (Waiman Long) [RHEL-152433]
  - vdso: Introduce aux_clock_resolution_ns() (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Split up __arch_update_vsyscall() into __arch_update_vdso_clock() (Waiman Long) [RHEL-152433]
  - vdso/vsyscall: Introduce a helper to fill clock configurations (Waiman Long) [RHEL-152433]
  - timekeeping: Remove the temporary CLOCK_AUX workaround (Waiman Long) [RHEL-152433]
  - timekeeping: Provide ktime_get_clock_ts64() (Waiman Long) [RHEL-152433]
  - timekeeping: Provide interface to control auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Provide update for auxiliary timekeepers (Waiman Long) [RHEL-152433]
  - timekeeping: Provide adjtimex() for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Prepare do_adtimex() for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Make do_adjtimex() reusable (Waiman Long) [RHEL-152433]
  - timekeeping: Add auxiliary clock support to __timekeeping_inject_offset() (Waiman Long) [RHEL-152433]
  - timekeeping: Make timekeeping_inject_offset() reusable (Waiman Long) [RHEL-152433]
  - timekeeping: Provide time setter for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Add minimal posix-timers support for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Provide time getters for auxiliary clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Update auxiliary timekeepers on clocksource change (Waiman Long) [RHEL-152433]
  - timekeeping: Add AUX offset to struct timekeeper (Waiman Long) [RHEL-152433]
  - ntp: Use ktime_get_ntp_seconds() (Waiman Long) [RHEL-152433]
  - timekeeping: Provide ktime_get_ntp_seconds() (Waiman Long) [RHEL-152433]
  - timekeeping: Introduce auxiliary timekeepers (Waiman Long) [RHEL-152433]
  - timekeeping: Add clock_valid flag to timekeeper (Waiman Long) [RHEL-152433]
  - timekeeping: Prepare timekeeping_update_from_shadow() (Waiman Long) [RHEL-152433]
  - timekeeping: Make __timekeeping_advance() reusable (Waiman Long) [RHEL-152433]
  - ntp: Rename __do_adjtimex() to ntp_adjtimex() (Waiman Long) [RHEL-152433]
  - ntp: Add timekeeper ID arguments to public functions (Waiman Long) [RHEL-152433]
  - ntp: Add support for auxiliary timekeepers (Waiman Long) [RHEL-152433]
  - redhat/configs: Add CONFIG_POSIX_AUX_CLOCKS=n (Waiman Long) [RHEL-152433]
  - time: Introduce auxiliary POSIX clocks (Waiman Long) [RHEL-152433]
  - timekeeping: Introduce timekeeper ID (Waiman Long) [RHEL-152433]
  - timekeeping: Avoid double notification in do_adjtimex() (Waiman Long) [RHEL-152433]
  - timekeeping: Cleanup kernel doc of __ktime_get_real_seconds() (Waiman Long) [RHEL-152433]
  - timekeeping: Remove hardcoded access to tk_core (Waiman Long) [RHEL-152433]
  - clocksource: Use cpumask_next_wrap() in clocksource_watchdog() (Waiman Long) [RHEL-152433]
  - clocksource: Use cpumask_any_but() in clocksource_verify_choose_cpus() (Waiman Long) [RHEL-152433]
  - timers/migration: Clean up the loop in tmigr_quick_check() (Waiman Long) [RHEL-152433]
  - PCI: Add PCI_BRIDGE_NO_ALIAS quirk for ASPEED AST1150 (Myron Stowe) [RHEL-143320]
  - PCI: Add ASPEED vendor ID to pci_ids.h (Myron Stowe) [RHEL-143320]
  - PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads (Myron Stowe) [RHEL-143320]
  - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mete Durlu) [RHEL-155896]
  - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix missing error handling for tx_queue (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Use macro instead of hard coded value (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Support 2G message size (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (Sreekanth Reddy) [RHEL-108694]
  - RDMA/bnxt_re: Support extended stats for Thor2 VF (Sreekanth Reddy) [RHEL-108694]
  - selftests: net: tests for add double tunneling GRO/GSO (Guillaume Nault) [RHEL-145367]
  - geneve: use GRO hint option in the RX path (Guillaume Nault) [RHEL-145367]
  - geneve: extract hint option at GRO stage (Guillaume Nault) [RHEL-145367]
  - geneve: add GRO hint output path (Guillaume Nault) [RHEL-145367]
  - geneve: pass the geneve device ptr to geneve_build_skb() (Guillaume Nault) [RHEL-145367]
  - geneve: constify geneve_hlen() (Guillaume Nault) [RHEL-145367]
  - geneve: add netlink support for GRO hint (Guillaume Nault) [RHEL-145367]
  - vxlan: expose gso partial features for tunnel offload (Guillaume Nault) [RHEL-145367]
  - geneve: expose gso partial features for tunnel offload (Guillaume Nault) [RHEL-145367]
  - net: introduce mangleid_features (Guillaume Nault) [RHEL-145367]
  - geneve, specs: Add port range to rt_link specification (Guillaume Nault) [RHEL-145367]
  - geneve: Allow users to specify source port range (Guillaume Nault) [RHEL-145367]
  - selftests: forwarding: lib: Move require_command to net, generalize (Guillaume Nault) [RHEL-145367]
  - USB: storage: Remove subclass and protocol overrides from Novatek quirk (Desnes Nunes) [RHEL-147788]
  - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer (Desnes Nunes) [RHEL-147788] {CVE-2025-68331}
  - xhci: dbgtty: fix device unregister: fixup (Desnes Nunes) [RHEL-147788]
  - xhci: dbgtty: fix device unregister (Desnes Nunes) [RHEL-147788]
  - usb: storage: sddr55: Reject out-of-bound new_pba (Desnes Nunes) [RHEL-147788] {CVE-2025-40345}
  - USB: serial: option: add support for Rolling RW101R-GL (Desnes Nunes) [RHEL-147788]
  - usb: typec: ucsi: psy: Set max current to zero when disconnected (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: pci: Sort out the Intel device IDs (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: pci: add support for the Intel Nova Lake -S (Desnes Nunes) [RHEL-147788]
  - drivers/usb/dwc3: fix PCI parent check (Desnes Nunes) [RHEL-147788]
  - xhci: sideband: Fix race condition in sideband unregister (Desnes Nunes) [RHEL-147788]
  - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host (Desnes Nunes) [RHEL-147788]
  - xhci: fix stale flag preventig URBs after link state error is cleared (Desnes Nunes) [RHEL-147788]
  - USB: serial: ftdi_sio: add support for u-blox EVK-M101 (Desnes Nunes) [RHEL-147788]
  - usb: cdns3: Fix double resource release in cdns3_pci_probe (Desnes Nunes) [RHEL-147788]
  - usb: gadget: udc: fix use-after-free in usb_gadget_state_work (Desnes Nunes) [RHEL-147788] {CVE-2025-68282}
  - USB: serial: option: add Telit FN920C04 ECM compositions (Desnes Nunes) [RHEL-147788]
  - USB: serial: option: add Quectel RG255C (Desnes Nunes) [RHEL-147788]
  - tcpm: allow looking for role_sw device in the main node (Desnes Nunes) [RHEL-147788]
  - tcpm: switch check for role_sw device with fw_node (Desnes Nunes) [RHEL-147788]
  - usb/core/quirks: Add Huawei ME906S to wakeup quirk (Desnes Nunes) [RHEL-147788]
  - USB: serial: option: add UNISOC UIS7720 (Desnes Nunes) [RHEL-147788]
  - xhci: dbc: enable back DbC in resume if it was enabled before suspend (Desnes Nunes) [RHEL-147788]
  - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event (Desnes Nunes) [RHEL-147788]
  - usb: xhci-pci: Fix USB2-only root hub registration (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: qcom,snps-dwc3: Fix bindings for X1E80100 (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: switch: split out ports definition (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: samsung,usb3-drd-phy: gs101: require Type-C properties (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: samsung,usb3-drd-phy: add blank lines between DT properties (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: Don't call clk_bulk_disable_unprepare() twice (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp (Desnes Nunes) [RHEL-147788]
  - usb: vhci-hcd: Prevent suspending virtually attached devices (Desnes Nunes) [RHEL-147788]
  - USB: serial: option: add SIMCom 8230C compositions (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Fix use-after-free in tb_dp_dprx_work (Desnes Nunes) [RHEL-147788] {CVE-2025-40002}
  - docs: driver-api: fix spelling of "buses". (Desnes Nunes) [RHEL-147788]
  - usb: xhci: align PORTSC trace with one-based port numbering (Desnes Nunes) [RHEL-147788]
  - usb: xhci: correct indentation for PORTSC tracing function (Desnes Nunes) [RHEL-147788]
  - usb: xhci: improve TR Dequeue Pointer mask (Desnes Nunes) [RHEL-147788]
  - usb: xhci-pci: add support for hosts with zero USB3 ports (Desnes Nunes) [RHEL-147788]
  - usb: xhci: Update a comment about Stop Endpoint retries (Desnes Nunes) [RHEL-147788]
  - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" (Desnes Nunes) [RHEL-147788]
  - USB: gadget: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-147788]
  - usb: gadget: Introduce free_usb_request helper (Desnes Nunes) [RHEL-147788]
  - usb: gadget: Store endpoint pointer in usb_request (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-rcar: Add Renesas RZ/G3E USB3 Host driver support (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-plat: Add .post_resume_quirk for struct xhci_plat_priv (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-rcar: Move R-Car reg definitions (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: Document Renesas RZ/G3E USB3HOST (Desnes Nunes) [RHEL-147788]
  - phy: fsl-imx8mq-usb: fix typec orientation switch when built as module (Desnes Nunes) [RHEL-147788]
  - usb: typec: Stub out typec_switch APIs when CONFIG_TYPEC=n (Desnes Nunes) [RHEL-147788]
  - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs (Desnes Nunes) [RHEL-147788]
  - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices (Desnes Nunes) [RHEL-147788]
  - redhat/configs: configs: riscv: Enable dwc3 on riscv for RHEL (Desnes Nunes) [RHEL-147788]
  - redhat/configs: Enable DWC3 Generic Platform Driver on RHEL automotive (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: add generic driver to support flattened (Desnes Nunes) [RHEL-147788]
  - clk: Provide devm_clk_bulk_get_all_enabled() helper (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: dwc3: add support for SpacemiT K1 (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update thunderbolt.h header file (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update xdomain.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update usb4_port.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update usb4.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tunnel.h function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tunnel.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tmu.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Add missing documentation in tb.h (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tb.h function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update tb.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update switch.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update retimer.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update property.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update path.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update nvm.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Add missing documentation in nhi_regs.h ring_desc structure (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update nhi.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update lc.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update eeprom.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update domain.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update dma_port.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Add missing documentation in ctl.h tb_cfg_request struct (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update ctl.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update clx.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update cap.c function documentation (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Update acpi.c function documentation (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Handle mode transitions for CD321x (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Read data status in probe and cache its value (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Use read_power_status function in probe (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Update partner identity when power status was updated (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Register DisplayPort and Thunderbolt altmodes for cd321x (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Read USB4, Thunderbolt and DisplayPort status for cd321x (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Add cd321x struct with separate size (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Trace data status for CD321x correctly (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Move switch_power_state to tipd_data (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Move initial irq mask to tipd_data (Desnes Nunes) [RHEL-147788]
  - usb: typec: tipd: Clear interrupts first (Desnes Nunes) [RHEL-147788]
  - usb: host: enable USB offload during system sleep (Desnes Nunes) [RHEL-147788]
  - xhci: sideband: add api to trace sideband usage (Desnes Nunes) [RHEL-147788]
  - usb: offload: add apis for offload usage tracking (Desnes Nunes) [RHEL-147788]
  - usb: xhci-plat: separate dev_pm_ops for each pm_event (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: qcom: Implement glue callbacks to facilitate runtime suspend (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: core: Introduce glue callbacks for flattened implementations (Desnes Nunes) [RHEL-147788]
  - usb: host: tegra: Remove manual wake IRQ disposal (Desnes Nunes) [RHEL-147788]
  - usb: host: xhci-tegra: Use platform_get_irq_optional() for wake IRQs (Desnes Nunes) [RHEL-147788]
  - usb: xhci: tegra: Support USB wakeup function for Tegra234 (Desnes Nunes) [RHEL-147788]
  - usb: udc: Add trace event for usb_gadget_set_state (Desnes Nunes) [RHEL-147788]
  - usb: dwc2: Add support for 'maximum-speed' property (Desnes Nunes) [RHEL-147788]
  - usb: typec: tcpci: add wakeup support (Desnes Nunes) [RHEL-147788]
  - dt-bindings: extcon: linux,extcon-usb-gpio: GPIO must be provided (Desnes Nunes) [RHEL-147788]
  - redhat/configs: Adding CONFIG_EXTCON_MAX14526 (Desnes Nunes) [RHEL-147788]
  - extcon: max14526: depends on I2C to prevent build warning/errors (Desnes Nunes) [RHEL-147788]
  - extcon: Add basic support for Maxim MAX14526 MUIC (Desnes Nunes) [RHEL-147788]
  - dt-bindings: extcon: Document Maxim MAX14526 MUIC (Desnes Nunes) [RHEL-147788]
  - usb: core: support eUSB2 double bandwidth large isoc URB frames (Desnes Nunes) [RHEL-147788]
  - usb: xhci: Add host support for eUSB2 double isochronous bandwidth devices (Desnes Nunes) [RHEL-147788]
  - usb: core: Introduce usb_endpoint_is_hs_isoc_double() (Desnes Nunes) [RHEL-147788]
  - usb: xhci: Use usb_endpoint_max_periodic_payload() (Desnes Nunes) [RHEL-147788]
  - usb: core: Add a function to get USB version independent periodic payload (Desnes Nunes) [RHEL-147788]
  - usb: core: eUSB2 companion descriptor is for isoc IN endpoints only (Desnes Nunes) [RHEL-147788]
  - usb: core: Parse eUSB2 companion descriptors for high speed devices only (Desnes Nunes) [RHEL-147788]
  - usb: core: Use le16_to_cpu() to read __le16 value in usb_parse_endpoint() (Desnes Nunes) [RHEL-147788]
  - usb: typec: ucsi: Add check for UCSI version (Desnes Nunes) [RHEL-147788]
  - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget (Desnes Nunes) [RHEL-147788] {CVE-2025-40314}
  - usb: host: xhci-tegra: Remove redundant ternary operators (Desnes Nunes) [RHEL-147788]
  - cdnsp: Remove unused tracepoints (Desnes Nunes) [RHEL-147788]
  - cdns3: Remove unused tracepoints (Desnes Nunes) [RHEL-147788]
  - cdns2: Remove unused tracepoints (Desnes Nunes) [RHEL-147788]
  - usb: gadget: configfs: Correctly set use_os_string at bind (Desnes Nunes) [RHEL-147788]
  - tools/usb/usbip: fix spelling mistakes in usbipd.c (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: IXP4xx UDC bindings (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: Refactor dwc3_mode_show (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: Add trace event for dwc3_set_prtcap (Desnes Nunes) [RHEL-147788]
  - usb: storage: realtek_cr: Simplify residue calculation in rts51x_bulk_transport() (Desnes Nunes) [RHEL-147788]
  - usb: misc: Update link to EHSET pdf doc (Desnes Nunes) [RHEL-147788]
  - usb: usblp: Use min_t() to improve usblp_read() (Desnes Nunes) [RHEL-147788]
  - USB: serial: oti6858: remove extranenous ; after comment (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Use string choices helpers (Desnes Nunes) [RHEL-147788]
  - mmc: rtsx_usb_sdmmc: use modern PM macros (Desnes Nunes) [RHEL-147788]
  - mmc: rtsx_usb_sdmmc: Fix uninitialized variable issue (Desnes Nunes) [RHEL-147788]
  - Documentation: driver-api: usb: Limit toctree depth (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: register a typec mux to change the QMPPHY_MODE (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: introduce QMPPHY_MODE (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: store DP phy power state (Desnes Nunes) [RHEL-147788]
  - phy: qcom: qmp-combo: Rename 'mode' to 'phy_mode' (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp: Reference usb-switch.yaml to allow mode-switch (Desnes Nunes) [RHEL-147788]
  - phy: remove unneeded 'fast_io' parameter in regmap_config (Desnes Nunes) [RHEL-147788]
  - misc: rtsx: usb card reader: add OCP support (Desnes Nunes) [RHEL-147788]
  - misc: rtsx: usb: Ensure mmc child device is active when card is present (Desnes Nunes) [RHEL-147788]
  - memstick: Add timeout to prevent indefinite waiting (Desnes Nunes) [RHEL-147788]
  - misc: rtsx_pci: Add separate CD/WP pin polarity reversal support (Desnes Nunes) [RHEL-147788]
  - phy: qcom-qmp-pcie: add dual lane PHY support for SM8750 (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: qcom,sc8280xp-qmp-pcie-phy: Document the SM8750 QMP PCIe PHY Gen3 x2 (Desnes Nunes) [RHEL-147788]
  - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet (Desnes Nunes) [RHEL-147788]
  - USB: Check no positive return values from pm_runtime_resume_and_get() (Desnes Nunes) [RHEL-147788]
  - usb: typec: ucsi: Add support for READ_POWER_LEVEL command (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Use is_pciehp instead of is_hotplug_bridge (Desnes Nunes) [RHEL-147788]
  - dt-bindings: usb: Drop duplicate nvidia,tegra20-ehci.txt (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: qcom: Remove extcon functionality from glue layer (Desnes Nunes) [RHEL-147788]
  - USB: lower "Device is not authorized for usage" message to info (Desnes Nunes) [RHEL-147788]
  - usb: dwc3: qcom: Add shutdown handler (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Use Linux Foundation IDs for XDomain discovery (Desnes Nunes) [RHEL-147788]
  - phy: ti: omap-usb2: drop unused module alias (Desnes Nunes) [RHEL-147788]
  - phy: hisilicon: hi6220-usb: drop unused module alias (Desnes Nunes) [RHEL-147788]
  - phy: ti: omap-usb2: enable compile testing (Desnes Nunes) [RHEL-147788]
  - dt-bindings: phy: fsl,imx8mq-usb: Drop 'db' suffix duplicating dtschema (Desnes Nunes) [RHEL-147788]
  - thunderbolt: Compare HMAC values in constant time (Desnes Nunes) [RHEL-147788]
  - phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure (Desnes Nunes) [RHEL-147788]
  - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157444]
  - ALSA: hda/tas2781: Ignore reset check for SPI device (CKI Backport Bot) [RHEL-148197]
  - platform/x86/intel/hid: Add Nova Lake support (Steve Best) [RHEL-117305]
  - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
  - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908]
  - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367]
  - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800]
  - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714]
  - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714]
  - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521]
  - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521]
  - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691]


author: Alexandra Hájková <ahajkova@redhat.com> [6.12.0-216.el10]
changelog:
  - redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
  - net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
  - mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
  - mpls: Protect net->mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
  - mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
  - mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
  - mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
  - mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
  - mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
  - mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
  - mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
  - mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
  - mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
  - mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
  - neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
  - neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
  - sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
  - rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
  - net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
  - net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
  - ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
  - net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
  - net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
  - net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
  - neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Protect tbl->phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
  - neighbour: Drop read_lock_bh(&tbl->lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Drop read_lock_bh(&tbl->lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
  - neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
  - neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
  - neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
  - neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
  - net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
  - net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
  - net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
  - net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
  - net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
  - net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
  - ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
  - net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
  - net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
  - ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
  - ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
  - Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
  - Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
  - ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
  - inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
  - ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
  - net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
  - ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
  - ipv6: Protect nh->f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
  - ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
  - ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
  - ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Preallocate rt->fib6_nh->rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
  - ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
  - net: Remove ->exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
  - geneve: Convert geneve_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - bareudp: Convert bareudp_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - bonding: Convert bond_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - bridge: Convert br_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - xfrm: Convert xfrmi_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert tunnel devices' ->exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - vxlan: Convert vxlan_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Convert nexthop_net_exit_batch_rtnl() to ->exit_rtnl(). (Antoine Tenart) [RHEL-150155]
  - net: Add ->exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
  - net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
  - net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
  - nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
  - net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
  - inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
  - net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
  - ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
  - net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
  - net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
  - dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
  - net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
  - net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
  - arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
  - ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
  - net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
  - net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
  - net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
  - net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
  - net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
  - net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
  - dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
  - dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
  - net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
  - net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
  - net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
  - net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
  - net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
  - net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
  - net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
  - net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
  - dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
  - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
  - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
  - can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Move ops->validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
  - net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
  - ipmr: use READ_ONCE() to read net->ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
  - ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table->fib_seq (Antoine Tenart) [RHEL-150155]
  - ipv4: use READ_ONCE()/WRITE_ONCE() on net->ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
  - fib: rules: use READ_ONCE()/WRITE_ONCE() on ops->fib_rules_seq (Antoine Tenart) [RHEL-150155]
  - ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
  - ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
  - ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
  - ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
  - ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
  - ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
  - ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
  - ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
  - ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
  - cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
  - cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
  - cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
  - cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
  - cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
  - selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
  - cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
  - cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
  - cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
  - cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
  - cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
  - cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
  - cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
  - Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
  - cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
  - cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
  - cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
  - cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
  - cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
  - cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
  - cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
  - cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
  - cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
  - cpuset: remove unused assignment to trialcs->partition_root_state (Waiman Long) [RHEL-113305]
  - cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
  - cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
  - cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
  - cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
  - cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
  - cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
  - cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
  - cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
  - cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
  - cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
  - cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
  - cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
  - cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
  - cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
  - cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
  - cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
  - cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
  - cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
  - cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
  - cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
  - cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
  - cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
  - docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
  - cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
  - cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
  - selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
  - cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
  - cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
  - cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
  - cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
  - selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
  - selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
  - Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
  - Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
  - cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
  - llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
  - sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
  - sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
  - cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
  - cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
  - cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
  - cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
  - cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
  - cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
  - cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
  - cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
  - cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
  - cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
  - cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
  - cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
  - cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
  - cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
  - cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
  - cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
  - mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
  - cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
  - cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
  - cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
  - cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
  - mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
  - blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
  - cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
  - cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
  - mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
  - RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
  - cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
  - cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
  - cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
  - cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
  - cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
  - cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
  - cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
  - firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
  - redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
  - redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
  - redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
  - include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
  - include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
  - arm_scmi: don't mess with ->d_parent->d_name (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
  - firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
  - firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
  - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
  - redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
  - i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
  - i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
  - i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
  - i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
  - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
  - tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
  - tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
  - tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
  - fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
  - tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
  - function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
  - tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
  - tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
  - x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
  - x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
  - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
  - tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
  - x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
  - tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
  - tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
  - tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
  - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
  - selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
  - tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
  - tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
  - tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
  - fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
  - fgraph: Initialize ftrace_ops->private for function graph ops (Jerome Marchand) [RHEL-151695]
  - ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
  - tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
  - tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
  - selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
  - tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
  - tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
  - ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
  - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
  - ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
  - ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
  - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
  - tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
  - ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
  - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
  - selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
  - selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
  - tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
  - ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
  - Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
  - arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
  - atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
  - tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
  - tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
  - fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
  - tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
  - ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
  - ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
  - ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
  - ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
  - docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
  - tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
  - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
  - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
  - ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
  - ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
  - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
  - md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
  - md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
  - nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
  - block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
  - block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
  - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
  - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
  - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
  - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
  - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
  - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
  - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
  - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
  - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
  - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
  - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
  - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
  - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
  - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
  - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
  - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
  - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
  - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
  - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
  - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
  - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
  - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
  - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
  - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
  - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
  - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
  - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
  - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
  - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
  - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
  - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
  - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
  - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
  - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
  - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
  - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
  - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
  - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
  - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
  - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
  - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
  - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
  - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
  - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
  - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
  - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
  - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
  - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
  - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
  - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-216
changelog:
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Enable abidb
  - Add BuildRequires: python3-devel
  - Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel


author: Dodji Seketeli <dodji@redhat.com> - 2.8-1
changelog:
  - Update to upstream 2.8 tarball
  - Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
    that is applied upstream.
  - Update to changing SONAME (libabigail.so.7.0.0)
  - Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
    depending on it at runtime


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.9-1
changelog:
  - Rebase to upstream 2.9 tarball
  - Update to changing SONAME (libabigail.so.8.0.0)
  - Simplify %check section to run both test targets in single invocation
  - Resolves: RHEL-121667


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
    * Update ignore list for source tarball generation
    * Added new assert macros to compare 2 double given an epsilon
    * Added meson build system
    * Added header with version to TAP13 output
    * Fixed issues with MSVC
    * Fixed TAP output for skipped tests
    * Fixed issue with fail_msg
    * CMake generated configs for find_package(cmocka)
    * Documentation improvements


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Ales Matej <amatej@redhat.com> - 0.73.1-14
changelog:
  - Mark all protected packages as user installed for all transactions (RHEL-128445)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-146507)
  - Clearer error for protected package broken dependencies


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: Eduard Abdullin <eabdullin@almalinux.org> - 14.3.1-4.4.alma.2
changelog:
  - Change to almalinux bugtracker
  - Set --with-arch_64=x86-64-v2 on v2 arch
  - Fix sysroot packages for i686 architecture


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Phil Sutter <psutter@redhat.com> [1.3.0-3.el10]
changelog:
  - src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
  - Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
  - udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
  - data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
  - data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
  - Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
  - expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
  - expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
  - set_elem: Review debug output (Phil Sutter) [RHEL-119650]


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.1-1
changelog:
  - Version 2.11.1 (RHEL-150897)
  - udiskslinuxnvmecontroller: Fix sanitize job start (RHEL-69113)
  - udiskslinuxpartitiontable: Fix missing job completion (RHEL-124987)
  - udiskslinuxdevice: multipath handling fixes (RHEL-128598)
  - lvm2: Prevent a segfault on discarded probe output (RHEL-138293)
  - udisksmodulemanager: Silence console warnings when requested module is not available (RHEL-144145)
  - tests: Make sure to load sr_mod for cdrom tests (RHEL-153132)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
changelog:
  - Update to 2.82.2
  - RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
  - RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.0-1
changelog:
  - Update to 2.87.0
  - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.87.5-1
changelog:
  - RHEL-159874 - Rebase mingw-glib2 to 2.87.5
  - RHEL-159187 - CVE-2025-14087 mingw-glib2: GLib: Buffer underflow in GVariant parser leads to heap corruption
  - Drop 0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch see https://bugzilla.redhat.com/show_bug.cgi?id=2431179


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-6
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-1417
  - alt-name: Remove alt-names when interface marked as absent. RHEL-126481
  - hsr: Automatically disable IP on hsr port. RHEL-100774
  - hsr: add support for configuring "interlink" property. RHEL-100766
  - Support referring alternative-name as port/parent/next-hop-interface.
    RHEL-126508
  - Support referring interface name using its alternative name. RHEL-126510


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.59-1
changelog:
  - Upgrade to 2.2.59
  - route: add support for lock-mtu option. RHEL-151844
  - iptunnel: introduce support for ipip/sit/ip6ip6/ipip6 tunnels. RHEL-79801
  - nm: Fix error when modify port list of down interface. RHEL-52334


author: Richard W.M. Jones <rjones@redhat.com> - 5.2.0-5
changelog:
  - Fix remote code execution via buffer over-read in Marshal deserialization
    CVE-2026-28364
    Resolves: RHEL-152488


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Paul Howarth <paul@city-fan.org> - 2.14-1
changelog:
  - Update to 2.14 (rhbz#2161420)
    - Remove Test::Fatal and Test::Needs from test prereqs (GH#7, GH#8)
  - Use SPDX-format license tag


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 0.14-21
changelog:
  - Use SPDX-format license tag
  - Use author-independent source URL
  - Drop redundant buildroot cleaning in %install section
  - Drop support for old Perl versions needing XS helper


author: Michal Josef Špaček <mspacek@redhat.com> - 6.16-1
changelog:
  - 6.16 bump
  - Fix minimal version of IO::Socket::IP
  - Fix requires/provided modules in *tests package


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 20231003.0-1
changelog:
  - Update to 20231003.0 (rhbz#2241845)
    - On Windows, avoid hang under IPCRUNDEBUG (GH#157)
    - Refresh "cpanfile" from Makefile.PL, to allow use on Windows
    - Normalize shebangs to /usr/bin/perl (GH#163)
    - Fix or skip all tests recently seen to fail on Windows
    - Include t/result.t in releases
    - Make full_result() and result() Windows behavior match non-Windows (GH#168)


author: Paul Howarth <paul@city-fan.org> - 0.142-1
changelog:
  - Update to 0.142
    Deprecations
    - Tilde expansion is deprecated due to inconsistent and bug-prone behavior
    Bug fixes
    - Prevent expansion of tildes that are not the very first character (e.g.
      "./~foo")
    - Prevent unintentional tilde expansion during internal path processing
    - Escape non-tilde glob characters before tilde expansion
    - Fixed spew/edit to a long filename approaching the filesystem length limit
    - Internal calls to 'print' are checked for possible errors
    - Internal read calls are checked for errors
    Changes
    - Path stringification now adds "./" in front of paths starting with literal
      tilde so they will round-trip; FREEZE updated to use this stringification
      rule as well
    - 'move' now uses File::Copy::move internally instead of the built-in
      'rename', allowing it to work across filesystems; it also returns an object
      for the moved location, allowing chaining
    - edit_lines_raw now uses a buffered raw I/O layer
    - edit_lines_utf8 now prefers PerlIO::utf8_strict, if available
    - lines_utf8 now consistently uses a buffered I/O layer
    - open*_utf8 now prefers PerlIO::utf8_strict, if available
    - slurp_utf8 now consistently uses an unbuffered I/O layer
    Documented
    - Changed all raw/UTF-8 layer descriptions in method documentation to match
      the code
    - Fixed SYNOPSIS syntax
    - Documented how to disable TMPDIR when making temp files/dirs
    Testing
    - Add additional tilde stringification testing
    - Fixed tilde expansion tests on Windows
    - Skip a problematic test case on Cygwin


author: Michal Josef Špaček <mspacek@redhat.com> - 1.65-4
changelog:
  - Rewrite to use of /builddir/build/BUILDROOT/perl-Pod-Parser-1.67-5.el10.s390x macro
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 0.001013-21
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.202-1
changelog:
  - Update to 1.202 (rhbz#2158345)
    - Converted to Dist::Zilla
    - Test::Deep will now require v5.12, and this may go up; this change allows
      simplification of the Makefile.PL, which was coping with a mistake made
      twelve years ago
  - Use SPDX-format license tag
  - Package LICENSE file


author: Paul Howarth <paul@city-fan.org> - 1.204-1
changelog:
  - Update to 1.204 (rhbz#2159015)
    - Try to avoid clobbering global error variables when loading test libraries
    - hash_each now enumates keys in sort() order, to make errors more consistent


author: Paul Howarth <paul@city-fan.org> - 0.7000-1
changelog:
  - Update to 0.70
    - Stop pointless use of taint-mode in tests, so tests pass when perl is
      built without taint support


author: Paul Howarth <paul@city-fan.org> - 0.7100-1
changelog:
  - Update to 0.71
    - Document and test different behavior regarding Booleans in perl 5.38.0
      compared to earlier versions (GH#21)


author: Paul Howarth <paul@city-fan.org> - 0.43-23
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Fix permissions verbosely
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.032-1
changelog:
  - Update to 0.032
    - New config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for
      temporarily turning failures into reports


author: Paul Howarth <paul@city-fan.org> - 0.033-1
changelog:
  - Update to 0.033
    - Add Test2 compatibility in the test triggered by done_testing()
    - New long-awaited feature (!!!) "allow_patterns", to either
      temporarily or globally exempt particular warning patterns


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Jan Rybar <jrybar@redhat.com> - 4.0.4-11
changelog:
  - ps: etime overflow reappeared with rewritten library
  - uptime, w: report user sessions only; upstream backport of 734930e47
  - Resolves: RHEL-60826
  - Resolves: RHEL-141839


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Miro Hrončok <mhroncok@redhat.com> - 1:7.2.6-2
changelog:
  - Weaken the runtime dependency on:
    - python3-sphinxcontrib-applehelp
    - python3-sphinxcontrib-devhelp
    - python3-sphinxcontrib-jsmath
    - python3-sphinxcontrib-htmlhelp
    - python3-sphinxcontrib-serializinghtml
    - python3-sphinxcontrib-qthelp
  - Packages that want to use them during build need to BuildRequire them explicitly


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0-3
changelog:
  - Fork python-flit-core from the python-flit package
  - Adjust the License tag to include flit_core/versionno.py's regex (BSD-2-Clause)


author: Karolina Surma <ksurma@redhat.com> - 1.4.1-5
changelog:
  - License verified according to the SPDX specification
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
changelog:
  - Resolves: RHEL-105973 Include fixes in python3-ipatests package
  - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101708 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-95733 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-27
changelog:
  - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
  - Resolves: RHEL-119628 Include fixes in python3-ipatests
  - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
  - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
  - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
  - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
  - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
  - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-113778 Command that retrieve and install new CA certificates
  - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-119339 Memory leaks in IPA plugins


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
  - Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
  - Resolves:  RHEL-4895 ipa use systemd-sysusers
  - Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.1-1
changelog:
  - Update to 7.4.1
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-1-2023-09-02
  - Fixes: rhbz#2236995


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.2-1
changelog:
  - Update to 7.4.2
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-2-2023-09-07
  - Fixes: rhbz#2237942


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.3-1
changelog:
  - Update to 7.4.3
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-3-2023-10-24
  - Fixes: rhbz#2245983


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Tomáš Hrnčiar <thrciar@redhat.com> - 1.6.0-3
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <mhroncok@redhat.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Priscila Gutierres <pgutier@redhat.com>
        Thomas Moschny <thomas.moschny@gmx.de>
        Tomas Orsava <torsava@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Cristian Le <git@lecris.dev> - 2.13.6-7
changelog:
  - Refactor the build script
  - Drop the python3-python2 distinction
  - Use standard cmake and pyproject macros (rhbz#2377381)
  - Allow to build with arbitrary generator (rhbz#2381106)


author: Lukáš Zachar <lzachar@redhat.com> - 78.1.1-3
changelog:
  - Adjust gating
  - Generic gating.yaml for all rhel
  - Use CS repos instead of Fedora
  - Remove python versions not available on c10s
  - Test with python-isort


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.14-1
changelog:
  - Update ktls policy
  Resolves: RHEL-123737
  - Update policy for redfish-finder
  Resolves: RHEL-50299
  - Allow sshd-session read, write, and map ica tmpfs files
  Resolves: RHEL-138247
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  Resolves: RHEL-127721
  - Allow stalld map sysfs files
  Resolves: RHEL-135512
  - Allow aide get attributes of a filesystem with extended attributes
  Resolves: RHEL-121479
  - Label miscellaneous /dev/papr-* devices
  Resolves: RHEL-129839
  - Allow KDE Plasma Login Manager to function as a display manager
  Resolves: RHEL-135676
  - Update specfile trigger for openwsmand
  Resolves: RHEL-133024


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.15-1
changelog:
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-77047
  - Allow stap server read virtual memory sysctls
  Resolves: RHEL-114104
  - Allow sshd-session inherit limits from its parent process
  Resolves: RHEL-136673
  - Allow sshd noatsecure on sshd-session execution
  Resolves: RHEL-138247
  - Allow sshd-net read and write to sshd vsock socket
  Related: RHEL-138247


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.16-1
changelog:
  - Allow sshd-session inherit limits from its parent sshd process
  Resolves: RHEL-136673
  - Revert "Allow sshd-session inherit limits from its parent process"
  Resolves: RHEL-136673
  - Allow tlshd write generic certificates
  Resolves: RHEL-123737
  - Allow systemd-hostnamed to create its Varlink socket
  Resolves: RHEL-139385
  - Update gpg_role() interface with unix_stream_socket permissions
  Resolves: RHEL-128555
  - Label /etc/aliases.cdb with etc_aliases_t
  Resolves: RHEL-109976
  - Add aliases.lmdb to mta_filetrans_named_content()
  Resolves: RHEL-140884
  - Update policy for bootupd
  Resolves: RHEL-141391


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.17-1
changelog:
  - Allow rhsmcertd read anaconda run files
  Resolves: RHEL-141391
  - Allow mdadm to use CAP_BPF during RAID monitoring
  Resolves: RHEL-135765
  - Allow mdadm the CAP_SYS_PTRACE capability
  Resolves: RHEL-135765
  - Allow staff and sysadm execute iotop using sudo
  Resolves: RHEL-134940
  - Allow kernel_t to read/write all domains' pipes
  Resolves: RHEL-124442
  - Allow nfsd_t domain setuid and setgid capability for rpc.mountd
  Resolves: RHEL-148107


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.18-1
changelog:
  - Allow NetworkManager list bpf directories
  Resolves: RHEL-142171
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  Resolves: RHEL-114886
  - Allow pkcsslotd read files in /proc and /sys
  Resolves: RHEL-130812
  - Allow pkcsslotd map its private tmpfs files
  Resolves: RHEL-130812
  - Allow tlshd communication to unconfined_t over a tcp socket
  Resolves: RHEL-125106
  - Label /run/insights-client.ppid with insights_client_run_t
  Resolves: RHEL-146687
  - Allow NM nvme dispatcher script start systemd services
  Resolves: RHEL-140760
  - Allow tlshd write generic certificate dirs
  Resolves: RHEL-127023
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  Resolves: RHEL-121479
  - Allow plasma login manager stop login services
  Resolves: RHEL-140911
  - Rebuild selinux policy after installation of the extra package
  Resolves: RHEL-135875
  Resolves: RHEL-143926
  - Move triggerin scriptlets to the parent packages
  Resolves: RHEL-141813
  - Rebuild policy before running {binsbin|varrun}-convert.sh
  Resolves: RHEL-141813


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.19-1
changelog:
  - Label the greetd login manager framework as a display manager
  Resolves: RHEL-147638
  - Allow sysadm user connect to lvm over a unix stream socket
  Resolves: RHEL-153729
  - Allow virtqemud map vhost net device
  Resolves: RHEL-141541
  - Allow virtqemud_t send kill signal to svirt_tcg_t
  Resolves: RHEL-69913
  - Allow virtqemud_t get priority of a svirt_t process
  Resolves: RHEL-69920
  - Dontaudit tlshd write generic certificate dirs
  Resolves: RHEL-152619
  - Allow redis_t to create netlink_rdma_socket
  Resolves: RHEL-154814
  - Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
  Resolves: RHEL-140212


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-11
changelog:
  - passwd.c: lock, open, close and unlock passwd database
    Resolves: RHEL-151055
    Resolves: RHEL-150955


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1:1.6.0-8
changelog:
  - migrated to SPDX license
  - resolves: rhbz#2219549* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.6.0-5

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit <hello@packit.dev> - 0.17.17-1
changelog:
  - Fix race with worker thread accessing $UMOCKDEV_DIR
  - Disable -Wincompatible-function-pointer-types for clang


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


author: Jens Petersen <petersen@redhat.com> - 15.1.0-0.1
changelog:
  - update to draft 15.1.0: https://unicode.org/versions/Unicode15.1.0/
  - do not add copyright.html file from website
  - add missing Unicode-TOU license tag


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-58
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Luboš Uhliarik <luhliari@redhat.com> - 7.6.0-3
changelog:
  - Resolves: RHEL-59267 - varnish rebase to 7.6.0
  - Resolves: RHEL-30333 CVE-2024-30156 varnish: HTTP/2 Broken Window
    Attack may result in denial of service


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-7
changelog:
  - cloner: Sync <uuid> and <sysinfo> system uuid (RHEL-34608)
  - virtinstall: fix regression with --boot and no install method (RHEL-34608)
  - progress: Fix showing correct final total (RHEL-34608)
  - virtinstall: Fix the allocating disk size printed by the progress bar (RHEL-34608)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (RHEL-34608)
  - virt-install: Recommend '--boot uefi' (RHEL-34608)
  - virt-install: Document Secure Boot setups (RHEL-34608)
  - tests: Add more cloud-init and TPM test cases (RHEL-34608)
  - installer: drop default TPM for --cloud-init install phase (RHEL-34608)
  - Add gating for centos stream 10 (RHEL-34608)
  - xmleditor: make gtksourceview optional (RHEL-35859)


author: Pavel Hrdina <phrdina@redhat.com> - 5.0.0-1
changelog:
  - Rebased to virt-manager-5.0.0 (RHEL-46783)
  - The rebase also fixes the following bugs:
      RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371
      RHEL-65189, RHEL-66768


author: Pavel Hrdina <phrdina@redhat.com> - 5.1.0-1
changelog:
  - Rebased to virt-manager-5.1.0 (RHEL-119228)
  - The rebase also fixes the following bugs:
      RHEL-105818


author: Pavel Hrdina <phrdina@redhat.com> - 5.1.0-2
changelog:
  - virtinst: interface: add support for backend.hostname and backend.fqdn (RHEL-95370)
  - maint: use constants instead of strings for boot devices (RHEL-71842)
  - virtinst: rework get_boot_order (RHEL-71842)
  - virtinst: guest: introduce can_use_device_boot_order (RHEL-71842)
  - virtinst: remove legacy attribute from set_boot_order/get_boot_order (RHEL-71842)
  - installer: add support to use device boot order (RHEL-71842)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-78505
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-78657


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-9
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313
  - Remove virt-v2v -io vddk-noextents=true option
    resolves: RHEL-102619
  - Add -o kubevirt -oo disk and -oo create options
    resolves: RHEL-101599
  - Fix escaping of nbdkit-vddk-plugin export parameter
    resolves: RHEL-102734
  - Fix installation of drivers on firstboot with pending reboots
    resolves: RHEL-103356
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104018
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109130
  - Set boot order for Linux guests based on grub location
    resolves: RHEL-108991


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-5
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938
  - Expose XFS version in virt-v2v-inspector
    resolves: RHEL-144075
  - Fix Debian 12 UEFI conversions
    resolves: RHEL-144467
  - Fix import when datastore name has characters like '+'
    resolves: RHEL-133729
  - Replace /etc/crypttab /dev/sdX with UUID
    resolves: RHEL-93583
  - Replace '/' in output name with '_'
    resolves: RHEL-136479


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: José Expósito <jexposit@redhat.com> - 1.20.0-6
changelog:
  - Rebuilt to include the package in CRB. See:
    https://bugzilla.redhat.com/show_bug.cgi?id=2309121
    https://issues.redhat.com/browse/RHEL-57593
    https://issues.redhat.com/browse/ENGCMP-4434


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


