# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-259.el10]
changelog:
  - redhat/kernel.spec.template: Switch UKI addons back to 504 cert (Vitaly Kuznetsov) [RHEL-238666]
  - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235810]
  - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232559] {CVE-2026-52991}
  - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232559] {CVE-2026-52991}
  - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224534]
  - randomize_kstack: Unify random source across arches (Mark Salter) [RHEL-215975]
  - x86/syscall/64: Move 64-bit syscall dispatch code (Mark Salter) [RHEL-215975]
  - randomize_kstack: Maintain kstack_offset per task (Mark Salter) [RHEL-215975]
  - dpll: zl3073x: add NCO virtual input pin (CKI Backport Bot) [RHEL-176048]
  - dpll: zl3073x: add per-DPLL serialization lock (CKI Backport Bot) [RHEL-176048]
  - dpll: zl3073x: use per-operation poll timeouts (CKI Backport Bot) [RHEL-176048]
  - dpll: add DPLL_PIN_TYPE_INT_NCO pin type (CKI Backport Bot) [RHEL-176048]
  - dpll: add STATE_CONNECTED_OVERRIDE pin capability (CKI Backport Bot) [RHEL-176048]
  - netfilter: nft_payload: fix mask build for partial field offload (Florian Westphal) [RHEL-185609]
  - ipvs: clear the nfct flag under lock (Florian Westphal) [RHEL-185609]
  - ipvs: do not mangle ICMP replies for non-first fragments (Florian Westphal) [RHEL-185609]
  - ipvs: fix places with wrong packet offsets (Florian Westphal) [RHEL-185609]
  - ipvs: fix the checksum validations (Florian Westphal) [RHEL-185609]
  - netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables: make nft_object rhltable per table (Florian Westphal) [RHEL-185609]
  - ipvs: do not propagate one-packet flag to synced conns (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: do not update comments from kernel-side hash adds (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair() (Florian Westphal) [RHEL-185609]
  - selftests: netfilter: nft_flowtable.sh: fix offload counter verification for tunnel tests (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (Florian Westphal) [RHEL-185609]
  - netfilter: xt_physdev: masks are not c-strings (Florian Westphal) [RHEL-185609]
  - ipvs: fix more places with wrong ipv6 transport offsets (Florian Westphal) [RHEL-185609]
  - ipvs: reload ip header after head reallocation (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: use correct direction to set up tunnel route (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: fix zone comparison in tuple dedup (Florian Westphal) [RHEL-185609]
  - netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() (Florian Westphal) [RHEL-185609] {CVE-2026-64554}
  - netfilter: ecache: fix inverted time_after() check (Florian Westphal) [RHEL-185609]
  - netfilter: xt_nat: reject unsupported target families (Florian Westphal) [RHEL-185609]
  - ipvs: ensure inner headers in ICMP errors are in headroom (Florian Westphal) [RHEL-185609]
  - ipvs: use parsed transport offset in SCTP state lookup (Florian Westphal) [RHEL-185609]
  - ipvs: use parsed transport offset in TCP state lookup (Florian Westphal) [RHEL-185609]
  - ipvs: pass parsed transport offset to state handlers (Florian Westphal) [RHEL-185609]
  - netfilter: handle unreadable frags (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: support IPIP tunnel with direct xmit (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: IPIP tunnel hardware offload is not yet support (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: use dst in this direction when pushing IPIP header (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: allocate the proper memory for the generic hash structure (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: cleanup the add/del backlog when resize failed (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: exclude gc when resize is in progress (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: mark the rcu locked areas properly (Florian Westphal) [RHEL-185609]
  - netfilter: nft_lookup: fix catchall element handling with inverted lookups (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: module names must be null-terminated (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: zero chainstack array (Florian Westphal) [RHEL-185609]
  - netfilter: ebtables: terminate table name before find_table_lock() (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (Florian Westphal) [RHEL-185609]
  - netfilter: xt_connmark: reject invalid shift parameters (Florian Westphal) [RHEL-185609]
  - ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (Florian Westphal) [RHEL-185609]
  - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_rbtree: get command skips end element with open interval (Florian Westphal) [RHEL-185609]
  - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates (Florian Westphal) [RHEL-185609]
  - netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (Florian Westphal) [RHEL-185609]
  - netfilter: xt_u32: reject invalid shift counts (Florian Westphal) [RHEL-185609]
  - netfilter: nf_nat_sip: reload possible stale data pointer (Florian Westphal) [RHEL-185609]
  - netfilter: nftables: restrict checkum update offset (Florian Westphal) [RHEL-185609]
  - netfilter: nftables: restrict linklayer and network header writes (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_queue: restrict writes to network header (Florian Westphal) [RHEL-185609]
  - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: fix race between dump and ip_set_list resize (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: zero at allocation time (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration (Florian Westphal) [RHEL-185609]
  - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: run expectation eviction with no helper (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: add deprecation warnings for irc and pptp trackers (Florian Westphal) [RHEL-185609]
  - netfilter: ctnetlink: do not allow to reset helper on existing conntrack (Florian Westphal) [RHEL-185609]
  - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-185609]
  - selftests: netfilter: conntrack_sctp_collision.sh: Introduce SCTP INIT collision test (Florian Westphal) [RHEL-185609]
  - netfilter: nft_synproxy: stop bypassing the priv->info snapshot (Florian Westphal) [RHEL-185609]
  - netfilter: x_tables.h: fix all kernel-doc warnings (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: prevent connlimit drops for early confirmed ct (Florian Westphal) [RHEL-185609]
  - netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_expect: use conntrack GC to reap expectations (Florian Westphal) [RHEL-185609]
  - netfilter: nf_reject: skip iphdr options when looking for icmp header (Florian Westphal) [RHEL-185609]
  - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-185609]
  - netfilter: nft_payload: reject offsets exceeding 65535 bytes (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: make sure gc is properly stopped (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types (Florian Westphal) [RHEL-185609]
  - netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: fix and simplify IP6IP6 tunnel handling (Florian Westphal) [RHEL-185609]
  - netfilter: xt_cluster: reject template conntracks in hash match (Florian Westphal) [RHEL-185609]
  - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: fix offloaded ct timeout never being extended (Florian Westphal) [RHEL-185609]
  - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: bail out if forward path cannot be discovered (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: check NULL when retrieving ct extension (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: gc and rcu fixes (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: add sequence counter to detect tree modifications (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: split count_tree_node rbtree walk into helper (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: use per nf_conncount_data spinlocks (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: callers must hold rcu read lock (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths (Florian Westphal) [RHEL-185609]
  - netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register (Florian Westphal) [RHEL-185609] {CVE-2026-53211}
  - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185609] {CVE-2026-53134}
  - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185609] {CVE-2026-53218}
  - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185609] {CVE-2026-52942}
  - netfilter: x_tables: avoid leaking percpu counter pointers (Florian Westphal) [RHEL-185609] {CVE-2026-53219}
  - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185609]
  - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-185609]
  - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185609] {CVE-2026-53220}
  - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (Florian Westphal) [RHEL-185609]
  - netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp (Florian Westphal) [RHEL-185609]
  - netfilter: conntrack: revert ct extension genid infrastructure (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: add refcounting from datapath (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE tracker (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helper (Florian Westphal) [RHEL-185609]
  - netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: fix unaligned memory access in timestamp adjustment (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: adjust duplicate timestamp options (Florian Westphal) [RHEL-185609]
  - netfilter: synproxy: drop packets if timestamp adjustment fails (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags (Florian Westphal) [RHEL-185609]
  - netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures (Florian Westphal) [RHEL-185609]
  - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-185609]
  - netfilter: bridge: make ebt_snat ARP rewrite writable (Florian Westphal) [RHEL-185609] {CVE-2026-53266}
  - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185609] {CVE-2026-53267}
  - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185609] {CVE-2026-53212}
  - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185609] {CVE-2026-53268}
  - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185609] {CVE-2026-53269}
  - ipvs: clear the svc scheduler ptr early on edit (Florian Westphal) [RHEL-185609] {CVE-2026-53270}
  - netfilter: xt_NFQUEUE: prefer raw_smp_processor_id (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_ftp: avoid u16 overflows (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_pipapo_avx2: restore performance optimization (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_proto_tcp: fix typos in comments (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (Florian Westphal) [RHEL-185609]
  - netfilter: nfnl_cthelper: apply per-class values when updating policies (Florian Westphal) [RHEL-185609]
  - netfilter: nft_set_rbtree: remove dead conditional (Florian Westphal) [RHEL-185609]
  - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185609]
  - netfilter: nf_conncount: use per-rule hash initval (Florian Westphal) [RHEL-185609]
  - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185609]
  - arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() (Mark Salter) [RHEL-184786]
  - arm64/mm: Reject memory removal that splits a kernel leaf mapping (Mark Salter) [RHEL-184786]
  - arm64/mm: Enable batched TLB flush in unmap_hotplug_range() (Mark Salter) [RHEL-184786]
  - devlink: Fix parent ref leak in devl_rate_node_create() (Petr Oros) [RHEL-179081]
  - devlink: Fix parent ref leak on tc-bw failure (Petr Oros) [RHEL-179081]
  - netdevsim: Add devlink port resource registration (Petr Oros) [RHEL-179081]
  - netdevsim: register a new devlink param with default value interface (Petr Oros) [RHEL-179081]
  - docs: net: fix minor issues with devlink docs (Petr Oros) [RHEL-179081]
  - devlink: Warn on resource ID collision with PARENT_TOP (Petr Oros) [RHEL-179081]
  - devlink: Implement devlink param multi attribute nested data values (Petr Oros) [RHEL-179081]
  - devlink: heap-allocate param fill buffers in devlink_nl_param_fill (Petr Oros) [RHEL-179081]
  - devlink: Release nested relation on devlink free (Petr Oros) [RHEL-179081] {CVE-2026-53261}
  - devlink: pass param values by pointer (Petr Oros) [RHEL-179081]
  - devlink: Document resource scope filtering (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: Add resource dump and scope filter test (Petr Oros) [RHEL-179081]
  - devlink: Add resource scope filtering to resource dump (Petr Oros) [RHEL-179081]
  - devlink: Document port-level resources and full dump (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: Add devlink port resource doit test (Petr Oros) [RHEL-179081]
  - devlink: Add port-specific option to resource dump doit (Petr Oros) [RHEL-179081]
  - devlink: Include port resources in resource dump dumpit (Petr Oros) [RHEL-179081]
  - devlink: Add dump support for device-level resources (Petr Oros) [RHEL-179081]
  - devlink: Add port-level resource registration infrastructure (Petr Oros) [RHEL-179081]
  - devlink: Refactor resource functions to be generic (Petr Oros) [RHEL-179081]
  - devlink: Fix incorrect skb socket family dumping (Petr Oros) [RHEL-179081]
  - documentation: networking: add shared devlink documentation (Petr Oros) [RHEL-179081]
  - devlink: introduce shared devlink instance for PFs on same chip (Petr Oros) [RHEL-179081]
  - devlink: allow devlink instance allocation without a backing device (Petr Oros) [RHEL-179081]
  - devlink: add devl_warn() helper and use it in port warnings (Petr Oros) [RHEL-179081]
  - devlink: add devlink_dev_driver_name() helper and use it in trace events (Petr Oros) [RHEL-179081]
  - devlink: introduce __devlink_alloc() with dev driver pointer (Petr Oros) [RHEL-179081]
  - devlink: support index-based notification filtering (Petr Oros) [RHEL-179081]
  - devlink: support index-based lookup via bus_name/dev_name handle (Petr Oros) [RHEL-179081]
  - devlink: allow to use devlink index as a command handle (Petr Oros) [RHEL-179081]
  - devlink: avoid extra iterations when found devlink is not registered (Petr Oros) [RHEL-179081]
  - devlink: add helpers to get bus_name/dev_name (Petr Oros) [RHEL-179081]
  - devlink: expose devlink instance index over netlink (Petr Oros) [RHEL-179081]
  - devlink: Refactor devlink_rate_nodes_check (Petr Oros) [RHEL-179081]
  - devlink: Reverse locking order for nested instances (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Fix tolerance calculation in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Fix and clarify TC bandwidth split in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Set shell=True for sysfs writes in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Use Iperf3Runner in devlink_rate_tc_bw.py (Petr Oros) [RHEL-179081]
  - selftest: netdevsim: test devlink default params (Petr Oros) [RHEL-179081]
  - devlink: support default values for param-get and param-set (Petr Oros) [RHEL-179081]
  - devlink: refactor devlink_nl_param_value_fill_one() (Petr Oros) [RHEL-179081]
  - devlink: pass extack through to devlink_param::get() (Petr Oros) [RHEL-179081]
  - Documentation: devlink: add devlink documentation for the kvaser_usb driver (Petr Oros) [RHEL-179081]
  - Documentation: devlink: add devlink documentation for the kvaser_pciefd driver (Petr Oros) [RHEL-179081]
  - selftests: drv-net: Make command requirements explicit (Petr Oros) [RHEL-179081]
  - i2c: designware: Add ACPI HID for DWAPB I2C controller on FUJITSU-MONAKA (Mark Salter) [RHEL-23132]
  - gpio: dwapb: Add ACPI HID for DWAPB GPIO controller on Fujitsu MONAKA (Mark Salter) [RHEL-23123]
  - new configs in net drivers (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: nxp,s32-dwmac: Use the GPR syscon (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: s32: use a syscon for S32_PHY_INTF_SEL_RGMII (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Fix PTP ref clock for Tegra234 (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: pcs: renesas,rzn1-miic: Add RZ/T2H and RZ/N2H support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_mac_irq_modify() (Izabela Bakollari) [RHEL-128151]
  - net: ethtool: mm: extract stmmac verification logic into common library (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove mac_base (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stm32 (and potentially others) resume regression (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-sophgo: Add phy interface filter (Izabela Bakollari) [RHEL-128151]
  - net: pcs: pcs-mtk-lynxi: report in-band capability for 2500Base-X (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Disable EEE RX clock stop when VLAN is enabled (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use PHY_INTF_SEL_x in functions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use PHY_INTF_SEL_x constants (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert all bitfields to GRF_FIELD*() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: replace HIWORD_UPDATE() with GRF_FIELD() (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs-plat: fix MODULE_AUTHOR (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: clean up stmmac_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: simplify set_interface() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: improve ndev->max_mtu setup readability (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use phy_intf_sel directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: meson8b: use PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: pass ingenic_mac struct rather than plat_dat (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify x2000 mac_set_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify mac_set_mode() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: move "MAC PHY control register" debug (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: prep PHY_INTF_SEL_x field after switch() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: simplify jz4775 mac_set_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: move ingenic_mac_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use PHY_INTF_SEL_x to select PHY interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: validate phy_intf_sel (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use PHY_INTF_SEL_x directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: convert to PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Add hardware supported cross-timestamp (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable TSO for Agilex5 platform (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable TBS support for Agilex5 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Agilex5 EMAC platform configuration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use ->set_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: cleanup arguments for set_intf_mode() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: simplify set_intf_mode() implementations (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use FIELD_PREP()/FIELD_GET() for PHY_INTF_SEL_x (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: convert to PHY_INTF_SEL_xxx (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add support for configuring the phy_intf_sel inputs (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_get_phy_intf_sel() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add phy_intf_sel and ACTPHYIF definitions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: s32: move PHY_INTF_SEL_x definitions out of the way (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use phylink's interface mode for set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove MAC_CTRL_REG modification (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: fix incorrect phy address check (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: est: Fix GCL bounds checks (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Consider Tx VLAN offload tag length for maxSDU (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: vlan: Disable 802.1AD tag insertion offload (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: reorganise stmmac_hwif_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use != rather than ^ for comparing dev_id (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide function to lookup hwif (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use FIELD_GET() for version register (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_get_*id() into stmmac_get_version() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: consolidate version reading and validation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_get_version() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move version handling into own function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Move subsecond increment configuration in dedicated helper (Izabela Bakollari) [RHEL-128151]
  - ethernet: stmmac: dwmac-rk: Add RK3506 GMAC support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add support for controlling PCS interrupts (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink managed WoL PHY speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink-managed Wake-on-Lan (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: replace has_xxxx with core_type (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: use phy_find_first to simplify stmmac_mdio_register (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to phylink PCS support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide PCS initialisation hook (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: only call stmmac_pcs_ctrl_ane() for integrated SGMII PCS (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: do not require snps,ps-speed for SGMII (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: hw->ps becomes hw->reverse_sgmii_enable (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move reverse-"pcs" mode setup to stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove RGMII "pcs" mode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove hw->ps xxx_core_init() hardware setup (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unused PCS loopback support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove PCS "mode" pause handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove SGMII/RGMII/SMII interrupt handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove xstats.pcs_* members (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove broken PCS code (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-rk: Fix disabling set_clock_selection (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add Eswin EIC7700 glue driver (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rename stmmac_phy_setup() to include phylink (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rearrange tc_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: avoid PHY speed change when configuring MTU (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: place .mac_finish() method more appropriately (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos-eth: move MDIO bus locking into stmmac_mdio (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Add support for Allwinner A523 GMAC200 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove stmmac_hw_setup() excess documentation parameter (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Convert open-coded register polling to helper macro (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: tc: Add HLBS drop count to taprio stats (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: est: Drop frames causing HLBS error (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: simplify stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PHY handling out of __stmmac_open()/release() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move initialisation of priv->tx_lpi_timer to stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PHY attachment error message into stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move xpcs clause 73 test into stmmac_init_phy() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_bus_clks_config() to stmmac_platform.c (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove mac_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rework mac_interface and phy_interface documentation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: thead: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: starfive: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: convert to use phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use phy_interface in stmmac_check_pcs_mode() (Izabela Bakollari) [RHEL-128151]
  - net: pcs: Kconfig: Fix unmet dependency warning (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add RZ/T2H MIIC support (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add per-SoC control for MIIC register unlock/lock (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add support to handle resets (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Make switch mode mask SoC-specific (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: move port range handling into SoC data (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Move configuration data to SoC-specific struct (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Add missing include files (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Drop trailing comma from of_device_id table (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move timestamping/ptp init to stmmac_hw_setup() caller (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move PTP support check into stmmac_init_timestamping() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add stmmac_setup_ptp() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rename stmmac_init_ptp() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move stmmac_init_ptp() messages into function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add __stmmac_release() to complement __stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: unexport stmmac_init_tstamp_counter() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stmmac_xdp_open() clk_ptp_ref error cleanup (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix PTP error cleanup in __stmmac_open() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: disable PTP clock after unregistering PTP (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ptp: improve handling of aux_ts_lock lifetime (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Add support for RZ/T2H SoC (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Use OF data for configuration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use PHY WoL (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use STMMAC_CSR_xxx definitions in platform glue (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: remove redundant clock rate tests (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: return clk_csr value from stmmac_clk_csr_set() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move initialisation of priv->clk_csr to stmmac_mdio (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: improve mdio register field definitions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move runtime PM into stmmac_mdio_access() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: merge stmmac_mdio_read() and stmmac_mdio_write() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: move stmmac_mdio_format_addr() into read/write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide priv->gmii_address_bus_config (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide stmmac_mdio_wait() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: provide address register formatter (Izabela Bakollari) [RHEL-128151]
  - net: pcs: lynx: support phy-mode = "10g-qxgmii" (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: only populate plat->crosststamp when supported (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ptp: conditionally populate getcrosststamp() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: add i.MX91 support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-rk: switch to FIELD_PREP_WM16 macro (Izabela Bakollari) [RHEL-128151]
  - net: pcs: rzn1-miic: Correct MODCTRL register offset (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: update runtime PM (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: clean up c22/c45 accessor split (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: minor cleanups to stmmac_bus_clks_config() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mdio: use netdev_priv() directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: drop unneeded default syscon value (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove incorrect _DLY_DISABLE bit definition (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Set CIC bit only for TX queues with COE (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: xgmac: Correct supported speed modes (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: fix stmmac_simple_pm_ops build errors (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac4: stop hardware from dropping checksum-error packets (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac4: report Rx checksum errors in status (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Correctly handle Rx checksum offload errors (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: thead: Enable TX clock before MAC initialization (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: explain the phylink_speed_down() call in stmmac_release() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add helpers to indicate WoL enable status (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use core wake IRQ support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unnecessary "stmmac: wakeup enable" print (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove redundant WoL option validation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove write-only mac->pmt (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove unnecessary checks in ethtool eee ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Return early if invalid in loongson_dwmac_fix_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Change first parameter of fix_soc_reset() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: convert to resume() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: pci: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: convert to suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: legacy hooks for suspend()/resume() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide a set of simple PM ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add suspend()/resume() platform ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make variable data a u32 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: put the PHY clock on remove (Izabela Bakollari) [RHEL-128151]
  - stmmac: xsk: fix negative overflow of budget in zerocopy mode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-socfpga: Add xgmac support for Agilex5 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-renesas-gbeth: Add PM suspend/resume callbacks (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs: mask readl() return value to 16 bits (Izabela Bakollari) [RHEL-128151]
  - net: pcs: xpcs: Use devm_clk_get_optional (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: populate entire system_counterval_t in get_time_fn() callback (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: Add snps,dwmac-5.00a IP compatible string (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-sophgo: Add support for Sophgo SG2042 SoC (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2 (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: lpc18xx: use plat_dat->phy_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: get ls1b resource only once (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: loongson1: provide match data struct (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: replace ioaddr with stmmac_priv for pcs_set_ane() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: make phy_intf_sel local (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: clean up code formatting (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: reorganise visconti_eth_set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: re-arrange speed decode (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove unnecessary clk_mac (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: use device rather than platform device in rk_priv_data (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: fix code formmating issue (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove pcs_get_adv_lp() support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: add ethqos_pcs_set_inband() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: remove obsolete .set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: convert px30_set_rmii_speed() to .set_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: simplify px30_set_rmii_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine .set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine clk_mac_speed rate setting functions (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: combine rv1126 set_*_speed() methods (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: add struct for programming register based speeds (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: simplify set_*_speed() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: rk: add get_interfaces() implementation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: improve .set_clk_tx_rate() method error message (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: extend use of snps,multicast-filter-bins property to xgmac (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: platform: guarantee uniqueness of bus_id (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: generate software timestamp just before the doorbell (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwxgmac2: Add support for HW-accelerated VLAN stripping (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stmmac_vlan: rename VLAN functions and symbol to generic symbol. (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Refactor VLAN implementation (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: convert speed_mode_2500() to get_interfaces() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: move phy_interface init to tgl_common_data() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: add get_interfaces() platform method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use priv->plat->phy_interface directly (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: use a local variable for priv->phylink_config (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Add new GMAC's PCI device ID support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Add new multi-chan IP core support (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Remove unused pcs-mdiodev field (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Don't check for phy to enable the SGMII adapter (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: Enable internal GMII when using 1000BaseX (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwmac-loongson: Move queue number init to common function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: calibrate tegra with mdio bus idle (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: visconti: convert to set_clk_tx_rate() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: Add DWMAC glue layer for Renesas GBETH (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: call set_phy_mode() before registration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: provide init function (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: socfpga: init dwmac->stmmac_rst before registration (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: move frag_size handling out of spin_lock (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: mediatek: stop initialising plat->mac_interface (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use PHY clock-stop capability (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sunxi: convert to set_clk_tx_rate() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sti: use phy_interface_mode_is_rgmii() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: sun8i: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: ingenic: convert to stmmac_pltfr_pm_ops (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: imx: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: use devm_stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: use stmmac_pltfr_probe() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: clean up interface parsing (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: anarion: clean up anarion_config_dt() error handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove speed_mode_2500() method (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove unnecessary setting max_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: remove ethqos->speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: qcom-ethqos: set serdes speed using serdes_speed (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: remove GMAC_1US_TIC_COUNTER definition (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel-plat: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: intel: remove eee_usecs_rate and hardware write (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: remove tegra_eqos_init() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: stm32: simplify clock handling (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: dwc-qos: use stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-128151]
  - net: stmmac: provide stmmac_pltfr_find_clk() (Izabela Bakollari) [RHEL-128151]
  - dt-bindings: deprecate "snps,en-tx-lpi-clockgating" property (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: thead,th1520-gmac: Describe APB interface clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: Get and enable APB clock on initialization (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: sophgo,sg2044-dwmac: Drop status from the example (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add support for Sophgo SG2044 dwmac (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: rockchip-dwmac: Add compatible string for RK3528 (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: rockchip-dwmac: Require rockchip,grf and rockchip,php-grf (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add FSD EQoS device tree bindings (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: Add T-HEAD dwmac support (Izabela Bakollari) [RHEL-100501]
  - dt-bindings: net: snps,dwmac: add support for Arria10 (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: re-initiate clause 37 Auto-negotiation (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: rearrange register definitions (Izabela Bakollari) [RHEL-100501]
  - net: remove phylink_pcs .neg_mode boolean (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: group EEE code together (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: clean up xpcs_config_eee() (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: remove xpcs_config_eee() from global scope (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: convert to phylink managed EEE (Izabela Bakollari) [RHEL-100501]
  - net: xpcs: add function to configure EEE clock multiplying factor (Izabela Bakollari) [RHEL-100501]
  - net: pcs: rzn1-miic: Convert to for_each_available_child_of_node() helper (Izabela Bakollari) [RHEL-100501]
  - net: pcs: rzn1-miic: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: actively unset DW_VR_MII_DIG_CTRL1_2G5_EN for 1G SGMII (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: fix DW_VR_MII_DIG_CTRL1_2G5_EN bit being set for 1G SGMII w/o inband (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: make xpcs_get_interfaces() static (Izabela Bakollari) [RHEL-100501]
  - net: pcs: lynx: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: mtk-lynxi: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: fill in PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-mtk-lynxi: correctly report in-band status capabilities (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-mtk-lynxi: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: pcs-lynx: implement pcs_inband_caps() method (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove return statements in void function (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rename xpcs_config_usxgmii() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: combine xpcs_link_up_{1000basex,sgmii}() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: replace open-coded mii_bmcr_encode_fixed() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rearrange xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove switch() in xpcs_link_up_1000basex() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use generic register definitions (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move Wangxun VR_XS_PCS_DIG_CTRL1 configuration (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: correctly place DW_VR_MII_DIG_CTRL1_2G5_EN (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use dev_*() to print messages (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: convert to use read_poll_timeout() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: add _modify() accessors (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: use FIELD_PREP() and FIELD_GET() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move searching ID list out of line (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: rename xpcs_get_id() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move definition of struct dw_xpcs to private header (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: provide a helper to get the phylink pcs given xpcs (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: pass xpcs instead of xpcs->id to xpcs_find_compat() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: don't use array for interface (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: remove dw_xpcs_compat enum (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: make xpcs_do_config() and xpcs_link_up() internal (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: drop interface argument from xpcs_create*() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: add xpcs_destroy_pcs() and xpcs_create_pcs_mdiodev() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: get rid of xpcs_init_iface() (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: drop interface argument from internal functions (Izabela Bakollari) [RHEL-100501]
  - net: pcs: xpcs: move PCS reset to .pcs_pre_config() (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: fix multiplication overflow when reading timestamp (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: fix dwmac1000 ptp timestamp status offset (Izabela Bakollari) [RHEL-100501]
  - stmmac: intel: interface switching support for RPL-P platform (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add initial support for RK3528 integrated PHY (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add integrated_phy_powerdown operation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Move integrated_phy_powerup/down functions (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Add GMAC support for RK3528 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: block PHY RXC clock-stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: socfpga: remove phy_resume() call (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: address non-LPI resume failures properly (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Call xpcs_config_eee_mult_fact() only when xpcs is present (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Fix accessing freed irq affinity_hint (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos-eth: use devm_kzalloc() for AXI data (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Provide FIFO sizes for DWMAC 1000 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: deprecate "snps,en-tx-lpi-clockgating" property (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: stm32: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: starfive: use PHY capability for TX clock stop (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: allow platforms to use PHY tx clock stop capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sunxi: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sun8i: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rk: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: meson8b: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ipq806x: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: anarion: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: mediatek: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: qcom-ethqos: remove of_get_phy_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary stmmac_mac_set() in stmmac_release() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove redundant racy tear-down in stmmac_dvr_remove() (Izabela Bakollari) [RHEL-100501]
  - stmmac: intel: Fix warning message for return value in intel_tsn_lane_is_available() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Remove unneeded GRF and peripheral GRF checks (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove write-only priv->speed (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add glue layer for Sophgo SG2044 SoC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: platform: Add snps,dwmac-5.30a IP compatible string (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: platform: Group GMAC4 compatible check (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: simplify phylink_suspend() and phylink_resume() calls (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: avoid shadowing global buf_sz (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: mostly remove "buf_sz" (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: Add FSD EQoS support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: interface switching support for ADL-N platform (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: configure SerDes according to the interface mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: configure SerDes on mac_finish (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: meson: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ipq806x: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rk: switch to use set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: imx: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: s32: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: intel: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: starfive: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: use generic stmmac_set_clk_tx_rate() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide generic implementation for set_clk_tx_rate method (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide set_clk_tx_rate() hook (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: clean up clock initialisation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwc-qos: name struct plat_stmmacenet_data consistently (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: ensure divisor gives proper rate (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: thead: use rgmii_clock() for RGMII clock rate (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Correct usage of maximum queue number macros (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: qcom-ethqos: use rgmii_clock() to set the link clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: print stmmac_init_dma_engine() errors using netdev_err() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-loongson: Add fix_soc_reset() callback (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add launch time support to XDP ZC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: "speed" passed to fix_mac_speed is an int (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove useless priv->flow_ctrl (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clarify priv->pause and pause module parameter (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Use str_enabled_disabled() helper (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove calls to xpcs_config_eee() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: call xpcs_config_eee_mult_fact() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: refactor clock management in EQoS driver (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Apply new page pool parameters when SPH is enabled (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove old EEE methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use stmmac_set_lpi_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: clear LPI_CTRL_STATUS_LPITCSE too (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add new MAC method set_lpi_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use common LPI_CTRL_STATUS bit definitions (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary LPI disable when enabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clear priv->tx_path_in_lpi_mode when disabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary priv->eee_enabled tests (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary priv->eee_active tests (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->dma_cap.eee test in tx_lpi methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: split stmmac_init_eee() and move to phylink methods (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: ensure LPIATE is cleared (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: ensure LPI is disabled when disabling EEE (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: delete software timer before disabling LPI (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Limit FIFO size by hardware capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Limit the number of MTL queues to hardware capability (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop redundant skb_mark_for_recycle() for SKB frags (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: convert to phylink managed EEE support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Convert prefetch() to net_prefetch() for received frames (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Optimize cache prefetch in RX path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Set page_pool_params.max_len to a precise size (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Switch to zero-copy in non-XDP RX path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: restart LPI timer after cleaning transmit descriptors (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: combine stmmac_enable_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide function for restarting sw LPI timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: provide stmmac_eee_tx_busy() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add stmmac_try_to_start_sw_lpi() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: check priv->eee_sw_timer_en in suspend path (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: simplify TX cleanup decision for ending sw LPI mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: correct priv->eee_sw_timer_en setting (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: rename stmmac_disable_sw_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: stm32: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: imx: Use syscon_regmap_lookup_by_phandle_args (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: sti: Switch from CONFIG_PM_SLEEP guards to pm_sleep_ptr() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove stmmac_lpi_entry_timer_config() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: split hardware LPI timer control (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove unnecessary EEE handling in stmmac_release() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move setup of eee_ctrl_timer to stmmac_dvr_probe() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use boolean for eee_enabled and eee_active (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move priv->eee_active into stmmac_eee_init() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move priv->eee_enabled into stmmac_eee_init() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->eee_tw_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: convert to use phy_eee_rx_clock_stop() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: report EEE error statistics if EEE is supported (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove priv->tx_lpi_enabled (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: clean up stmmac_disable_eee_mode() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: remove redundant code from ethtool EEE ops (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: make EEE depend on phy->enable_tx_lpi (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use unsigned int for eee_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use correct type for tx_lpi_timer (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: move tx_lpi_timer tracking to phylib (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Unexport stmmac_rx_offset() from stmmac.h (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Set dma_sync_size to zero for discarded frames (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: use PCS supported_interfaces (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: TSO: Simplify the code flow of DMA descriptor allocations (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-imx: add imx93 clock input support in RMII mode (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop useless code related to ethtool rx-copybreak (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Drop redundant dwxgmac_tc_ops variable (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Relocate extern declarations in common.h and hwif.h (Izabela Bakollari) [RHEL-100501]
  - net: dwmac-dwc-qos-eth: Use helper rgmii_clock (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: set initial EEE policy configuration (Izabela Bakollari) [RHEL-100501]
  - stmmac: dwmac-intel-plat: remove redundant dwmac->data check in probe (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac_socfpga: This platform has GMAC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Configure only the relevant bits for timestamping setup (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Don't include dwmac4 definitions in stmmac_ptp (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Enable timestamping interrupt on dwmac1000 (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce dwmac1000 timestamping operations (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce dwmac1000 ptp_clock_info and operations (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Only update the auto-discovered PTP clock features (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Use per-hw ptp clock ops (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Don't modify the global ptp ops directly (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Receive Watchdog Timeout is not in abnormal interrupt summary (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Fix the MTL_OP_MODE_*_MASK operation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: dwmac4: Fix MTL_OP_MODE_RTC mask and shift macros (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add glue layer for T-HEAD TH1520 SoC (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: add support for dwmac 3.72a (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Enable FPE for tc-mqprio/tc-taprio (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Complete FPE support (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: xgmac: Rename XGMAC_RQ to XGMAC_FPRQ (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Get the TC number of net_device by netdev_get_num_tc() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Refactor FPE functions to generic version (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce stmmac_fpe_supported() (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Rework macro definitions for gmac4 and xgmac (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Introduce separate files for FPE implementation (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Programming sequence for VLAN packets with split header (Izabela Bakollari) [RHEL-100501]
  - net: stmmac: Add DW QoS Eth v4/v5 ip payload error statistics (Izabela Bakollari) [RHEL-100501]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-260.el10]
changelog:
  - x86/mce: Set up the polling timer before CMCI discovery (Steve Best) [RHEL-239086]
  - scsi: target: Fix hexadecimal CHAP_I handling (Maurizio Lombardi) [RHEL-231666] {CVE-2026-63886}
  - thermal: core: Fix thermal zone device registration error path (Steve Best) [RHEL-226828] {CVE-2026-43332}
  - perf/arm_pmu: Skip PMCCNTR_EL0 on NVIDIA Olympus (Charles Mirabile) [RHEL-176084]
  - Reapply "cpuidle: menu: Avoid discarding useful information" (Mark Langsdorf) [RHEL-222582]
  - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222670] {CVE-2026-53329}
  - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222688] {CVE-2026-53136}
  - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222698] {CVE-2026-53143}
  - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222746] {CVE-2026-63884}
  - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222752] {CVE-2026-53356}
  - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222574] {CVE-2026-64219}
  - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222626] {CVE-2026-63879}
  - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222650] {CVE-2026-53374}
  - KVM: VMX: Disable CET by default (Aidan Wallace) [RHEL-235002]
  - KVM: VMX: introduce module parameter to disable CET (Aidan Wallace) [RHEL-235002]
  - perf/arm-cmn: Support CMN S3 r2 (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Plumb in new filter types (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Refactor event filter data (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Refactor event filter programming (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Rename filter variables for clarity (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Add workarounds for CMN-S3 on Graviton5 (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Move DTM index data out of hw_perf_event (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix resource_size_t printk specifier in arm_cmn_init_dtc() (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix incorrect error check for devm_ioremap() (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Stop claiming entire iomem region (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Fix DVM node events (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Reject unsupported hardware configurations (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Support CMN-600AE (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Permit more exhaustive groups (Jeremy Linton) [RHEL-234652]
  - perf/arm-cmn: Ensure port and device id bits are set properly (Jeremy Linton) [RHEL-234652]
  - perf trace: Refactor augmented_raw_syscalls using bpf_for (Trevor Allison) [RHEL-183355]
  - perf trace: Factor out BPF loop body (Trevor Allison) [RHEL-183355]
  - ALSA: hda/realtek: Add quirk for TongFang X6SP45xU (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: ps: disable MSI on resume in ACP PCI driver (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/tas2781: Cancel async firmware request at unbind (Jaroslav Kysela) [RHEL-193253]
  - firmware_loader: Add cancel helper for async requests (Jaroslav Kysela) [RHEL-193253]
  - ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: scarlett2: Allow selecting config_set by firmware version (Jaroslav Kysela) [RHEL-193253]
  - ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8183: Release reserved memory on cleanup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8183: Check runtime resume during probe (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8192: Release reserved memory on cleanup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8192: Check runtime resume during probe (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: topology: fix memory leak in snd_sof_load_topology (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: topology: validate vendor array size before parsing (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc4-control: Validate notification payload size (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: FCP: Fix NULL pointer dereference in interface lookup (Jaroslav Kysela) [RHEL-193253]
  - ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count (Jaroslav Kysela) [RHEL-193253]
  - ASoC: rt5575: Use __le32 for SPI burst write address (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SDCA: Validate written enum value in ge_put_enum_double() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs530x: Fix expected MCLK rates for CS5302/4/8 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: clear opened when stream enable fails (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: reject stream disable with no active interface (Jaroslav Kysela) [RHEL-193253]
  - ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Free sideband sg_table objects (Jaroslav Kysela) [RHEL-193253]
  - soundwire: intel_ace2x: release bpt_stream when close it (Jaroslav Kysela) [RHEL-193253]
  - soundwire: fix bug in sdw_add_element_group_count found by syzkaller (Jaroslav Kysela) [RHEL-193253]
  - soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached Peripheral (Jaroslav Kysela) [RHEL-193253]
  - mfd: cs42l43: Sanity check firmware size (Jaroslav Kysela) [RHEL-193253]
  - ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: avoid stale FIFO cells during resize (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: oss: Serialize readq reset state with q->lock (Jaroslav Kysela) [RHEL-193253]
  - ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Fix kernel heap address leak in bounce_error_event() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Guard sideband endpoint removal (Jaroslav Kysela) [RHEL-193253]
  - ASoC: topology: Check PCM and DAI name strings before use (Jaroslav Kysela) [RHEL-193253]
  - ASoC: tegra: tegra210_ahub: Validate written enum value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: fsl: fsl_audmix: Validate written enum values (Jaroslav Kysela) [RHEL-193253]
  - ASoC: meson: aiu: Validate written enum values (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: hdac_hdmi: Validate written enum value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT properly (Jaroslav Kysela) [RHEL-193253]
  - ASoC: SOF: Intel: select SND_SOC_SDW_UTILS=y from SND_SOC_SOF_HDA_GENERIC=y (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Fix wrong error test on simple_write_to_buffer() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() (Jaroslav Kysela) [RHEL-193253]
  - ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails (Jaroslav Kysela) [RHEL-193253]
  - ASoC: codecs: aw88261: fix incorrect masks for boost regs (Jaroslav Kysela) [RHEL-193253]
  - ASoC: sma1307: Fix uevent string leaks in fault worker (Jaroslav Kysela) [RHEL-193253]
  - ALSA: aloop: Drop superfluous break (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: acp-sdw-sof: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193253]
  - ASoC: amd: acp-sdw-legacy: Bound DAI link iteration (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Clear variable event pointer on read (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: Fix partial userptr event expansion (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: fix Kconfig dependency of HD Audio PCI (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: qcom: Initialize offload control return value (Jaroslav Kysela) [RHEL-193253]
  - ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: midi: Serialize output teardown with event_input (Jaroslav Kysela) [RHEL-193253]
  - ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (Jaroslav Kysela) [RHEL-193253]
  - ALSA: xen-front: Connect event channel after stream prepare (Jaroslav Kysela) [RHEL-193253]
  - ALSA: xen-front: Reset event channel state on stream clear (Jaroslav Kysela) [RHEL-193253]
  - ASoC: dapm: Fix widget lookup with prefixed names across DAPM contexts (Jaroslav Kysela) [RHEL-193253]
  - ASoC: mediatek: mt8189: Fix probe resource cleanup (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: Fix cached processing coefficient verbs (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda: conexant: Remove mic bias threshold override (Jaroslav Kysela) [RHEL-193253]
  - ALSA: hda/realtek: Add quirk for TongFang X6xx45xU (Jaroslav Kysela) [RHEL-193253]
  - ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_IFB_SILENCE_ON_EMPTY (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Update Babyface Pro control caches only after successful writes (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Roll back quirk control caches on write errors (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() (Jaroslav Kysela) [RHEL-193253]
  - ALSA: usb-audio: avoid kobject path lookup in DualSense match (Jaroslav Kysela) [RHEL-193253] {CVE-2026-64478}
  - ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer Flow 8 (Jaroslav Kysela) [RHEL-193253]
  - HID: uhid: convert to hid_safe_input_report() (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove() (Benjamin Tissoires) [RHEL-170872]
  - HID: Input: Add battery list cleanup with devm action (Benjamin Tissoires) [RHEL-170872]
  - Input: add ABS_SND_PROFILE (Benjamin Tissoires) [RHEL-170872]
  - HID: wacom: Fix OOB write in wacom_hid_set_device_mode() (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo-go: drop dead NULL check on to_usb_interface() (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo-go: reject non-USB transports in probe (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: Fix buffer over-read and unaligned access in X12 Tab raw_event handler (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse (Benjamin Tissoires) [RHEL-170872]
  - HID: remove duplicate hid_warn_ratelimited definition (Benjamin Tissoires) [RHEL-170872]
  - HID: u2fzero: free allocated URB on probe errors (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Fix size_t specifier in hid_report_raw_event() (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Add support for newer Bluetooth keyboards (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix integer overflow in pidff_rescale (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: add reset quirk for BLTP7853 touchpad (Benjamin Tissoires) [RHEL-170872]
  - HID: core: introduce hid_safe_input_report() (Benjamin Tissoires) [RHEL-170872]
  - HID: pass the buffer size to hid_report_raw_event (Benjamin Tissoires) [RHEL-170872]
  - HID: google: hammer: stop hardware on devres action failure (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: run inactivity autodim from workqueues (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46202}
  - HID: appletb-kbd: fix UAF in inactivity-timer cleanup path (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46213}
  - HID: playstation: Clamp num_touch_reports (Benjamin Tissoires) [RHEL-170872] {CVE-2026-46232}
  - HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: fix OOB write in mcp2221_raw_event() (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: really enable the intended work around for appledisplay (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-sjoy: race between init and usage (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Fix regression of input name assignment (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-quickspi: Fix some error codes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: restore OS_TYPE after resume from s2idle (Benjamin Tissoires) [RHEL-170872]
  - HID: elan: Add support for ELAN SB974D touchpad (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add missing size validation for Rock Band 3 Pro instruments (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add missing size validation for SMK-Link remotes (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: remove unneeded WARN_ON() in sony_leds_init() (Benjamin Tissoires) [RHEL-170872]
  - HID: ft260: validate i2c input report length (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: fix incorrect force-feedback check in sony_suspend() (Benjamin Tissoires) [RHEL-170872]
  - HID: core: clamp report_size in s32ton() to avoid undefined shift (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31624}
  - HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: fix race condition when accessing stale stack pointer (Benjamin Tissoires) [RHEL-170872]
  - HID: winwing: Enable rumble effects (Benjamin Tissoires) [RHEL-170872]
  - HID: core: do not allow parsing 0-sized reports (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: refactor endpoint lookup (Benjamin Tissoires) [RHEL-170872]
  - HID: huawei: fix CD30 keyboard report descriptor issue (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: validate num_touch_reports in DualShock 4 reports (Benjamin Tissoires) [RHEL-170872]
  - HID: drop 'default !EXPERT' from tristate symbols (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: fix deadlock in hid_post_reset() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-53037}
  - HID: apple: ensure the keyboard backlight is off if suspending (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (Benjamin Tissoires) [RHEL-170872]
  - HID: alps: fix NULL pointer dereference in alps_raw_event() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31625}
  - HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Standardise hid_report_enum variable nomenclature (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: update module description (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Check bounds when deleting force-feedback effects (Benjamin Tissoires) [RHEL-170872]
  - Docs: hid: intel-ish-hid: make long URL usable (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: sony: add battery status support for Rock Band 4 PS5 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: fix style issues (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: update hid-sony supported devices (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add support for more instruments (Benjamin Tissoires) [RHEL-170872]
  - bpf: Add fix for Trust Philips SPK6327 (145f:024b) modifier keys (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Huion KeyDial K20 over bluetooth (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add a BPF to get the touchpad type (Benjamin Tissoires) [RHEL-170872]
  - hid: bpf: hid_bpf_helpers: add helper for having read/write udev properties (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: handle injected report descriptor in HID-BPF (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add helper macros for LE/BE conversion (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: hid_bpf_helpers: provide a cleanup functions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix some signed vs unsigned compiler warnings (Benjamin Tissoires) [RHEL-170872]
  - Input: add keycodes for contextual AI usages (HUTRR119) (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-thc: Add more frequency support for SPI (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Intel-quickspi: Improve power management for touch devices (Benjamin Tissoires) [RHEL-170872]
  - HID: core: use __free(kfree) and __free(kvfree) to clean up temporary buffers (Benjamin Tissoires) [RHEL-170872]
  - HID: core: factor out hid_parse_collections() (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: fix LEDS dependencies (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Add support for multiple batteries per device (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Introduce struct hid_battery and refactor battery code (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Convert battery code to devm_* (Benjamin Tissoires) [RHEL-170872]
  - HID: input: use __free(kfree) to clean up temporary buffers (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: Fix spelling mistake "Enfore" -> "Enforce" (Benjamin Tissoires) [RHEL-170872]
  - HID: pl: eliminate private debug macro (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: Add module parameter to enfoce GPIO mode (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Fix spelling mistake "configuratiion" -> "configuration" (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Remove unneeded semicolon (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Remove unneeded semicolon (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add IMU and Touchpad RO Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add RGB LED control interface (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Touchpad Mode Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Feature Status Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add MCU ID Attribute (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go-s: Add Lenovo Legion Go S Series HID Driver (Benjamin Tissoires) [RHEL-170872]
  - HID: Include firmware version in the uevent (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add OS Mode Toggle (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Calibration Settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add RGB LED control interface (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add FPS Mode DPI settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Rumble and Haptic Settings (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Feature Status Attributes (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lenovo-go: Add Lenovo Legion Go Series HID Driver (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: use mcp_i2c_smbus_read for block reads (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: elan: Add parade-tc3408 timing (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_DEADBAND quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_NEG_SATURATION quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add MISSING_NEG_COEFFICIENT quirk (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Refactor field quirks detection (Benjamin Tissoires) [RHEL-170872]
  - Input: rename INPUT_PROP_HAPTIC_TOUCHPAD to INPUT_PROP_PRESSUREPAD (Benjamin Tissoires) [RHEL-170872]
  - HID: Kysona: Add support for VXE Dragonfly R1 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: amd_sfh: don't log error when device discovery fails with -EOPNOTSUPP (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 (Benjamin Tissoires) [RHEL-170872]
  - HID: roccat: fix use-after-free in roccat_report_event (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43111}
  - HID: Intel-thc-hid: Intel-quickspi: Add NVL Device IDs (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Add NVL Device IDs (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: Check to ensure report responses match the request (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43047}
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43049}
  - HID: bpf: prevent buffer overflow in hid_hw_request (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31401}
  - selftests/hid: fix compilation when bpf_wq and hid_device are not exported (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Mitigate potential OOB by removing bogus memset() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43048}
  - HID: intel-thc-hid: Set HID_PHYS with PCI BDF (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: add .resume method in PM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Enable MX Master 4 over bluetooth (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Add HID_BATTERY_QUIRK_DYNAMIC for Elan touchscreens (Benjamin Tissoires) [RHEL-170872]
  - HID: input: Drop Asus UX550* touchscreen ignore battery quirks (Benjamin Tissoires) [RHEL-170872]
  - HID: mcp2221: cancel last I2C command on read error (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: Keep latency normal on deactivate for reactivation gesture (Benjamin Tissoires) [RHEL-170872]
  - HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: ipc: Add Nova Lake-H/S PCI device IDs (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - selftests: hid: tests: test_wacom_generic: add tests for display devices and opaque devices (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: new class MT_CLS_EGALAX_P80H84 (Benjamin Tissoires) [RHEL-170872]
  - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 (Benjamin Tissoires) [RHEL-170872]
  - Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses (Benjamin Tissoires) [RHEL-170872]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments (Benjamin Tissoires) [RHEL-170872]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix condition effect bit clearing (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23349}
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types (Benjamin Tissoires) [RHEL-170872]
  - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23382}
  - HID: asus: avoid memory leak in asus_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31524}
  - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31522}
  - HID: apple: avoid memory leak in apple_report_fixup() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-31520}
  - HID: Document memory allocation properties of report_fixup() (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add dongle device IDs for CRKD Gibson SG (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Fix wrong register fields updating (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (Benjamin Tissoires) [RHEL-170872 RHEL-183865] {CVE-2026-45877}
  - HID: logitech-hidpp: Add support for Logitech K980 (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Differentiate "invalid device index" error (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: wacom: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-sensor-hub: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: picolcd_core: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: appletb-kbd: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add eGalaxTouch EXC3188 support (Benjamin Tissoires) [RHEL-170872]
  - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Add FocalTech FT8112 (Benjamin Tissoires) [RHEL-170872]
  - HID: sony: add support for bluetooth Rock Band 4 PS4 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43136}
  - HID: prodikeys: Check presence of pm->input_ep82 (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43251}
  - HID: magicmouse: Do not crash on missing msc->input (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43140}
  - HID: sony: add support for Rock Band 4 PS4 and PS5 guitars (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-pl: handle probe errors (Benjamin Tissoires) [RHEL-170872] {CVE-2026-43152}
  - HID: pidff: Do not set out of range trigger button (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add quirks for Lenovo Yoga Book 9i (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Add missing check for input_ff_create_memless (Benjamin Tissoires) [RHEL-170872] {CVE-2026-45969}
  - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards (Benjamin Tissoires) [RHEL-170872]
  - HID: rapoo: Add support for side buttons on RAPOO 0x2015 mouse (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech: add HID++ support for Logitech MX Anywhere 3S (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Filter spurious HID vendor codes on ROG laptops (Benjamin Tissoires) [RHEL-170872]
  - HID: asus: Replace magic number with HID_UP_ASUSVENDOR constant (Benjamin Tissoires) [RHEL-170872]
  - HID: Elecom: Add support for ELECOM M-XT3DRBK (018C) (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: work around VID/PID conflict for appledisplay (Benjamin Tissoires) [RHEL-170872]
  - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid: intel-ish-hid: Document PRODUCT_FAMILY firmware matching (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: intel-ish-hid: loader: Add PRODUCT_FAMILY-based firmware matching (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: Intel-thc-hid: Intel-quicki2c: Add power management for touch device (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Add output report support (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Support writing output report format (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Use put_unaligned_le16 for __le16 writes (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-quicki2c: Use size_t for all length variables (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23178}
  - selftests/hid: add a test for the Digitizer/Button Type pressurepad (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: use a enum class for the different button types (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: require hidtools 0.12 (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: set INPUT_PROP_PRESSUREPAD based on Digitizer/Button Type (Benjamin Tissoires) [RHEL-170872]
  - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer (Benjamin Tissoires) [RHEL-170872] {CVE-2026-23196}
  - hid: intel-thc-hid: Select SGL_ALLOC (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: fix bpf compilations due to -fms-extensions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix bpf compilation with -fms-extensions (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: drop dead NULL checks in kfuncs (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Fix wrong register reading (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-ish-hid: Reset enum_devices_done before enumeration (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: intel-ish-hid: Update ishtp bus match to support device ID table (Benjamin Tissoires) [RHEL-170872 RHEL-183865]
  - HID: Intel-thc-hid: Intel-thc: fix dma_unmap_sg() nents value (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Center initial joystick axes to prevent spurious events (Benjamin Tissoires) [RHEL-170872]
  - HID: usbhid: paper over wrong bNumDescriptor field (Benjamin Tissoires) [RHEL-170872]
  - drivers: hid: renegotiate resolution multipliers with device after reset (Benjamin Tissoires) [RHEL-170872]
  - HID: evision: Fix Report Descriptor for Evision Wireless Receiver 320f:226f (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Fix probe failure when used with KVM (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Remove duplicate error logging (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Add support for G Pro X Superlight 2 receiver (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid-tablet: add ABS_DISTANCE test for stylus/pen (Benjamin Tissoires) [RHEL-170872]
  - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: fix typo in HID usage table (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add the Huion Kamvas 27 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add heuristics to the Huion Inspiroy 2S eraser button (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for XP-Pen Deco02 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the XP-Pen Deco 01 V3 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Waltop Batteryless Tablet (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add fixup for Logitech SpaceNavigator variants (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: support for Huion Kamvas 16 Gen 3 (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: add support for Huion Kamvas 13 (Gen 3) (model GS1333) (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: Add support for the Inspiroy 2M (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix needs_playback check (Benjamin Tissoires) [RHEL-170872]
  - HID: corsair-void: Use %pe for printing PTR_ERR (Benjamin Tissoires) [RHEL-170872]
  - HID: elecom: Add support for ELECOM M-XT3URBK (018F) (Benjamin Tissoires) [RHEL-170872]
  - HID: winwing: Improve Orion2 throttle support (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid-alps: Format DataByte* subsection headings (Benjamin Tissoires) [RHEL-170872]
  - Documentation: hid-alps: Fix packet format section headings (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: add WQ_PERCPU to alloc_workqueue users (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Reduce JC_SUBCMD_RATE_MAX_ATTEMPTS (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-input: Extend Elan ignore battery quirk to USB (Benjamin Tissoires) [RHEL-170872]
  - HID: amd_sfh: Stop sensor before starting (Benjamin Tissoires) [RHEL-170872]
  - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list (Benjamin Tissoires) [RHEL-170872]
  - HID: lenovo: fixup Lenovo Yoga Slim 7x Keyboard rdesc (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: Remove redundant pm_runtime_mark_last_busy() calls (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: add tests for missing release on the Dell Synaptics (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-debug: Fix spelling mistake "Rechargable" -> "Rechargeable" (Benjamin Tissoires) [RHEL-170872]
  - HID: Kconfig: Fix build error from CONFIG_HID_HAPTIC (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Add support for the XP-PEN Artist 24 Pro (Benjamin Tissoires) [RHEL-170872]
  - HID: nintendo: Rate limit IMU compensation message (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Add printk_ratelimited variants to hid_warn() etc (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-hidpp: Silence protocol errors on newer lightspeed receivers (Benjamin Tissoires) [RHEL-170872]
  - HID: logitech-dj: Add support for a new lightspeed receiver iteration (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lg-g15: Add hw_brightness_changed support for the G510 keyboard (Benjamin Tissoires) [RHEL-170872]
  - HID: cp2112: Add parameter validation to data length (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: intel-quicki2c: Fix wrong type casting (Benjamin Tissoires) [RHEL-170872]
  - HID: lg-g15 - Add support for Logitech G13. (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Switch to scoped_guard() in {dualsense|dualshock4}_output_worker() (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Silence sparse warnings for locking context imbalances (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Update SP preamp gain comment line (Benjamin Tissoires) [RHEL-170872]
  - HID: intel-thc-hid: intel-quicki2c: support ACPI config for advanced features (Benjamin Tissoires) [RHEL-170872]
  - HID: core: Change hid_driver to use a const char* for name (Benjamin Tissoires) [RHEL-170872]
  - HID: hidraw: tighten ioctl command parsing (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: hidraw: forge wrong ioctls and tests them (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: hidraw: add more coverage for hidraw ioctls (Benjamin Tissoires) [RHEL-170872]
  - selftests/hid: update vmtest.sh for virtme-ng (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Support DualSense audio jack event reporting (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Support DualSense audio jack hotplug detection (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Redefine DualSense input report status field (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Prefer kzalloc(sizeof(*buf)...) (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Document spinlock_t usage (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Fix all alignment and line length issues (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Correct spelling in comment sections (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Replace uint{32,16,8}_t with u{32,16,8} (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Simplify locking with guard() and scoped_guard() (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Add spaces around arithmetic operators (Benjamin Tissoires) [RHEL-170872]
  - HID: playstation: Make use of bitfield macros (Benjamin Tissoires) [RHEL-170872]
  - HID: multitouch: add haptic multitouch support (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: add hid_haptic_switch_mode (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: add functions handling events (Benjamin Tissoires) [RHEL-170872]
  - HID: input: calculate resolution for pressure (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: initialize haptic device (Benjamin Tissoires) [RHEL-170872]
  - HID: input: allow mapping of haptic output (Benjamin Tissoires) [RHEL-170872]
  - HID: haptic: introduce hid_haptic_device (Benjamin Tissoires) [RHEL-170872]
  - Input: add FF_HAPTIC effect type (Benjamin Tissoires) [RHEL-170872]
  - HID: add haptics page defines (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Fix possible null pointer dereference (Benjamin Tissoires) [RHEL-170872]
  - HID: bpf: rescan the device for the group after a load/unload (Benjamin Tissoires) [RHEL-170872]
  - HID: core: factor out hid_set_group() (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Fix test in i2c_hid_core_register_panel_follower() (Benjamin Tissoires) [RHEL-170872]
  - HID: i2c-hid: Make elan touch controllers power on after panel is enabled (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Reduce PID_EFFECT_OPERATION spam (Benjamin Tissoires) [RHEL-170872]
  - HID: universal-pidff: clang-format pass (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: clang-format pass (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Define all cardinal directions (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove Anssi's email address from info msg (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Separate check for infinite duration (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Rework pidff_upload_effect (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Update debug messages (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Add support for AXES_ENABLE field (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Simplify HID field/usage searching logic (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Better quirk assigment when searching for fields (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Treat PID_REQUIRED_REPORTS as count, not max (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Use ARRAY_SIZE macro instead of sizeof (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove unneeded debug (Benjamin Tissoires) [RHEL-170872]
  - HID: pidff: Remove unhelpful pidff_set_actuators helper (Benjamin Tissoires) [RHEL-170872]
  - HID: uclogic: Use str_true_false() helper (Benjamin Tissoires) [RHEL-170872]
  - HID: Intel-thc-hid: Intel-thc: Use str_true_false() helper (Benjamin Tissoires) [RHEL-170872]
  - HID: Kconfig: Add LEDS_CLASS_MULTICOLOR dependency to HID_LOGITECH (Benjamin Tissoires) [RHEL-170872]
  - HID: hid-lg-g15: Use standard multicolor LED API (Benjamin Tissoires) [RHEL-170872]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-261.el10]
changelog:
  - mm/util: don't read __page_2 for order-1 folios in snapshot_page() (Luiz Capitulino) [RHEL-214116]
  - selftests: tls: size splice_short pipe by page size (Valentin Schneider) [RHEL-153139]
  - selftests: tls: use ASSERT_GE in test_mutliproc (Valentin Schneider) [RHEL-153139]
  - selftests: tls: add test for data loss on small pipe (Valentin Schneider) [RHEL-153139]
  - perf/aux: Fix page UAF in map_range() (Michael Petlan) [RHEL-218473] {CVE-2026-64300}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231358] {CVE-2026-64557}
  - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231358] {CVE-2026-64557}
  - perf build-id: Fix off-by-one bug when printing kernel/module build-id (Marek Pazur) [RHEL-122642]
  - arm_mpam: guard MBWU state before adding it to garbage (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix MPAMCFG_MBW_PBM register setting (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix software reset values of MPAMCFG_PRI (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Fix use-after-free during unmount (Jeremy Linton) [RHEL-218644]
  - fs/resctrl: Free mon_data structures on rdt_get_tree() failure (Jeremy Linton) [RHEL-218644]
  - x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Update architecture version check for MPAM MSC (Jeremy Linton) [RHEL-218644]
  - arm64: cpufeature: Add support for the MPAM v0.1 architecture version (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Check whether the config array is allocated before destroying it (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix false positive assert failure during mpam_disable() (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Improve check for whether or not NRDY is hardware managed (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Pretend that NRDY is always hardware managed (Jeremy Linton) [RHEL-218644]
  - arm_mpam: Fix monitor instance selection when checking for hardware NRDY (Jeremy Linton) [RHEL-218644]
  - arm64: dts: imx8dxl-ss-conn: delete usb3_lpcg node (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8dxl-ss-conn: Disable USB3 nodes (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62: Add RNG node (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am625: Add OLDI support (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62: Add support for AM625 OLDI IO Control (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8-ss-conn: add missed clock enet_2x_txclk for fec[1,2] (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8-ss-conn: add fsl,tuning-step for usdhc1 and usdhc2 (Steve Dunnagan) [RHEL-213310]
  - arm64: dts: imx8: add default clock rate for usdhc (Steve Dunnagan) [RHEL-213310]
  - crypto: iaa - fix per-node CPU counter reset in rebalance_wq_table() (Eder Zulian) [RHEL-213821]
  - dmaengine: tegra: Fix burst size calculation (Eder Zulian) [RHEL-213821]
  - dmaengine: Fix possible use after free (Eder Zulian) [RHEL-213821]
  - dmaengine: qcom: gpi: set DMA_PRIVATE capability (Eder Zulian) [RHEL-213821]
  - dmaengine: imx-sdma: Refine spba bus searching in probe (Eder Zulian) [RHEL-213821]
  - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180276] {CVE-2026-43276}
  - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180276] {CVE-2026-43276}
  - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180091] {CVE-2026-46145}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-262.el10]
changelog:
  - smb: client: Fix use-after-free in cifs_try_adding_channels() (Paulo Alcantara) [RHEL-235460]
  - smb/client: show compress mount option (Paulo Alcantara) [RHEL-235460]
  - netfs: Fix folio_queue ENOMEM in writeback by adding a mempool (Paulo Alcantara) [RHEL-235460]
  - netfs: release readahead folios on iterator preparation failure (Paulo Alcantara) [RHEL-235460]
  - netfs: handle single writeback rolling buffer allocation failure (Paulo Alcantara) [RHEL-235460]
  - netfs: clear PG_private_2 on copy-to-cache append failure (Paulo Alcantara) [RHEL-235460]
  - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-235460]
  - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235460]
  - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235460]
  - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-235460]
  - smb: client: free partially allocated transform folio queue (Paulo Alcantara) [RHEL-235460]
  - cifs: validate idmap key payload length (Paulo Alcantara) [RHEL-235460]
  - smb: client: remove conditional return with no effect (Paulo Alcantara) [RHEL-235460]
  - smb: client: fix buffer leaks in SMB1 read and write (Paulo Alcantara) [RHEL-235460]
  - smb: client: use GFP_KERNEL for registry allocation (Paulo Alcantara) [RHEL-235460]
  - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235460]
  - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235460]
  - smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target (Paulo Alcantara) [RHEL-235460]
  - smb: client: bound dirent name against end of SMB response in cifs_filldir (Paulo Alcantara) [RHEL-235460]
  - smb: client: validate DFS referral PathConsumed (Paulo Alcantara) [RHEL-235460]
  - cifs: Remove CIFSSMBSetPathInfoFB() fallback function (Paulo Alcantara) [RHEL-235460]
  - cifs: Fix and improve cifs_is_path_accessible() function (Paulo Alcantara) [RHEL-235460]
  - cifs: Show reason why autodisabling serverino support (Paulo Alcantara) [RHEL-235460]
  - scsi: smartpqi: Update version to 2.1.42-011 (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Add new PCI device-ids (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Add support for CCISS_BIG_PASSTHRU ioctl (Don Brace) [RHEL-224341]
  - scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches. (Don Brace) [RHEL-224341]
  - redhat/configs: automotive: disable CONFIG_MD (Jared Kangas) [RHEL-237678]
  - mm/gup: fix GUP-fast fallback for NULL-mapping order-0 folios (Rafael Aquini) [RHEL-231964]
  - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227851] {CVE-2026-64560}
  - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227851] {CVE-2026-64370}
  - posix-timers: Expand timer_[re]arm() callbacks with a boolean return value (Waiman Long) [RHEL-227851]
  - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227851]
  - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227851]
  - drm/xe: gate observation streams with perf_allow_cpu() (Michael Petlan) [RHEL-212122]
  - perf/core: out-of-line and export perf_allow_cpu/tracepoint() (Michael Petlan) [RHEL-212122]
  - memfd: deny writeable mappings when implying SEAL_WRITE (CKI Backport Bot) [RHEL-228530] {CVE-2026-63952}
  - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191041] {CVE-2026-53195}
  - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191041] {CVE-2026-53196}
  - drm/panel: Clean up S6E3FC2X01 config dependencies (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Write REFCLK to 48MHz on DCN21 (Karol Herbst) [RHEL-180328]
  - drm/bridge: dw-hdmi-qp: Provide HDMI Vendor Specific InfoFrame (Karol Herbst) [RHEL-180328]
  - drm/xe/uapi: update used tracking kernel-doc (Karol Herbst) [RHEL-180328]
  - drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info (Karol Herbst) [RHEL-180328]
  - drm/ttm/tests: add a test to exercise ttm_bo_swapout (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix EAGAIN sign in pf_migration_consume() (Karol Herbst) [RHEL-180328]
  - Revert "drm/nouveau/gsp: add support for GA100" (Karol Herbst) [RHEL-180328]
  - dma: contiguous: Check return value of dma_contiguous_reserve_area() (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix MMIO access using PF view instead of VF view during migration (Karol Herbst) [RHEL-180328]
  - drm/i915/display: enable ccs modifiers on dg2 (Karol Herbst) [RHEL-180328]
  - drm/xe/wa: Drop redundant entries for Wa_16021867713 & Wa_14019449301 (Karol Herbst) [RHEL-180328]
  - drm/xe/xe3p_xpc: Drop stale MCR steering TODO comment (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix redundant MQD iterations in GFX v12.1 (Karol Herbst) [RHEL-180328]
  - drm/panthor: Extend VM locked region for remap case to be a superset (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Check if there are kfd porcesses using adev by kfd_processes_count (Karol Herbst) [RHEL-180328]
  - dma-fence: Silence sparse warning in dma_fence_describe (Karol Herbst) [RHEL-180328]
  - drm/hisilicon/hibmc: add updating link cap in DP detect() (Karol Herbst) [RHEL-180328]
  - drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks() (Karol Herbst) [RHEL-180328]
  - Revert "drm/amdgpu: Init mcm_addr look up table" (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: fix kernel-doc warning for ras_eeprom_append() (Karol Herbst) [RHEL-180328]
  - drm/xe/xe_pagefault: Disallow writes to read-only VMAs (Karol Herbst) [RHEL-180328]
  - Revert "i915: don't use a vma that didn't match the context VM" (Karol Herbst) [RHEL-180328]
  - drm/drm_atomic: duplicate colorop states if plane color pipeline in use (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix kernel-doc warning for smu_msg_v1_send_msg() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix kernel-doc warning for amdgpu_ttm_alloc_mmio_remap_bo() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: remove gart_window_lock usage from gmc v12_1 (Karol Herbst) [RHEL-180328]
  - drm/sched: Remove racy hack from drm_sched_fini() (Karol Herbst) [RHEL-180328]
  - dma-buf: fix UAF in dma_buf_put() tracepoint (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix runtime PM imbalance issue in amdgpu_pm.c (Karol Herbst) [RHEL-180328]
  - drm/nouveau/gsp: add support for GA100 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs (Karol Herbst) [RHEL-180328]
  - drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Bound VBIOS record-chain walk loops (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2 (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix smu13 power limit default/cap calculation (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: apply SMU 13.0.10 workaround during MP1 unload (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Fix incorrect VRAM GART mappings on non-4K page size systems (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: set noretry=1 as default for GFX 10.1.x (Navi10/12/14) (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: restart the CS if some parts of the VM are still invalidated (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix waiting for all submissions for userptrs (Karol Herbst) [RHEL-180328]
  - drm/xe: Clear pending_disable before signaling suspend fence (Karol Herbst) [RHEL-180328]
  - drm/xe/multi_queue: skip submit when primary queue is suspended (Karol Herbst) [RHEL-180328]
  - drm/xe/display: fix oops in suspend/shutdown without display (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix NULL dereference in get_queue_ids() (Karol Herbst) [RHEL-180328]
  - drm/i915: Fix color blob reference handling in intel_plane_state (Karol Herbst) [RHEL-180328]
  - drm/gem: Try to fix change_handle ioctl, attempt 4 (Karol Herbst) [RHEL-180328]
  - accel/ethosu: reject NPU_OP_RESIZE commands from userspace (Karol Herbst) [RHEL-180328]
  - accel/ethosu: reject DMA commands with uninitialized length (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix arithmetic issues in dma_length() (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix wrong weight index in NPU_SET_SCALE1_LENGTH on U85 (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix IFM region index out-of-bounds in command stream parser (Karol Herbst) [RHEL-180328]
  - accel/ethosu: fix OOB write in ethosu_gem_cmdstream_copy_and_validate() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() (Karol Herbst) [RHEL-180328]
  - drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() (Karol Herbst) [RHEL-180328]
  - Revert "drm/xe: Skip exec queue schedule toggle if queue is idle during suspend" (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Fix signed integer truncation in IPC receive (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add bounds checks for firmware log indices (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Add bounds check for firmware runtime memory (Karol Herbst) [RHEL-180328]
  - Revert "drm/xe/nvls: Define GuC firmware for NVL-S" (Karol Herbst) [RHEL-180328]
  - drm/xe: fix job timeout recovery for unstarted jobs and kernel queues (Karol Herbst) [RHEL-180328]
  - drm/xe: fix refcount leak in xe_range_fence_insert() (Karol Herbst) [RHEL-180328]
  - drm/amd/display: use plane color_mgmt_changed to track colorop changes (Karol Herbst) [RHEL-180328]
  - drm/atomic: track individual colorop updates (Karol Herbst) [RHEL-180328]
  - drm/colorop: make lut(1/3)d_interpolation props correctly behave as mutable (Karol Herbst) [RHEL-180328]
  - drm/colorop: Remove read-only comments from interpolation fields (Karol Herbst) [RHEL-180328]
  - drm/virtio: Fix driver removal with disabled KMS (Karol Herbst) [RHEL-180328]
  - drm/i915/edp: Check supported link rates DPCD read (Karol Herbst) [RHEL-180328]
  - drm/hyperv: During panic do VMBus unload after frame buffer is flushed (Karol Herbst) [RHEL-180328]
  - Drivers: hv: vmbus: Provide option to skip VMBus unload on panic (Karol Herbst) [RHEL-180328]
  - drm/imx: Fix three kernel-doc warnings in dcss-scaler.c (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix calling VM invalidation in amdgpu_hmm_invalidate_gfx (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Check for pdd drm file first in CRIU restore path (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: fix NULL pointer bug in svm_range_set_attr (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/si: Disregard vblank time when no displays are connected (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Karol Herbst) [RHEL-180328]
  - drm/i915/color: Fix HDR pre-CSC LUT programming loop (Karol Herbst) [RHEL-180328]
  - drm/gem: fix race between change_handle and handle_delete (Karol Herbst) [RHEL-180328]
  - drm/hyperv: validate VMBus packet size in receive callback (Karol Herbst) [RHEL-180328]
  - drm/hyperv: validate resolution_count and fix WIN8 fallback (Karol Herbst) [RHEL-180328]
  - dma-buf: fix UAF in dma_buf_fd() tracepoint (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Read Intel DPCD workaround register (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (Karol Herbst) [RHEL-180328]
  - drm/xe: Restore IDLEDLY regiter on engine reset (Karol Herbst) [RHEL-180328]
  - drm/i915/aux: use polling when irqs are unavailable (Karol Herbst) [RHEL-180328]
  - accel/ivpu: prevent uninitialized data bug in debugfs (Karol Herbst) [RHEL-180328]
  - drm/xe/oa: Fix exec_queue leak on width check in stream open (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce1: Check that the GPU address is < 128 MiB (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2) (Karol Herbst) [RHEL-180328]
  - drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP (Karol Herbst) [RHEL-180328]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4 (Karol Herbst) [RHEL-180328]
  - drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p (Karol Herbst) [RHEL-180328]
  - drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_18033852989 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019988906 (Karol Herbst) [RHEL-180328]
  - drm/xe/pf: Fix CFI failure in debugfs access (Karol Herbst) [RHEL-180328]
  - drm/xe/vf: Fix signature of print functions (Karol Herbst) [RHEL-180328]
  - drm/xe/gsc: Fix double-free of managed BO in error path (Karol Herbst) [RHEL-180328]
  - drm/gem: Make the GEM LRU lock part of drm_device (Karol Herbst) [RHEL-180328]
  - accel/qaic: Add overflow check to remap_pfn_range during mmap (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Validate GPIO pin LUT table size before iterating (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix integer overflow in bios_get_image() (Karol Herbst) [RHEL-180328]
  - drm/bridge: megachips: remove bridge when irq request fails (Karol Herbst) [RHEL-180328]
  - drm/bridge: it66121: acquire reset GPIO in probe (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vpe: Force collaborate sync after TRAP (Karol Herbst) [RHEL-180328]
  - drm/xe/multi_queue: Fix secondary queue error case (Karol Herbst) [RHEL-180328]
  - drm/virtio: use uninterruptible resv lock for plane updates (Karol Herbst) [RHEL-180328]
  - drm/i915/display: Copy color pipeline from plane in the primary joiner pipe (Karol Herbst) [RHEL-180328]
  - drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_lvds: fix hang on init failure (Karol Herbst) [RHEL-180328]
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Karol Herbst) [RHEL-180328]
  - drm/ttm: Convert -EAGAIN from dmem_cgroup_try_charge to -ENOSPC (Karol Herbst) [RHEL-180328]
  - drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure (Karol Herbst) [RHEL-180328]
  - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-180328]
  - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-180328]
  - drm/i915: skip __i915_request_skip() for already signaled requests (Karol Herbst) [RHEL-180328]
  - drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (Karol Herbst) [RHEL-180328]
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Karol Herbst) [RHEL-180328]
  - drm/bridge: imx8qxp-pxl2dpi: avoid ERR_PTR with device_node cleanup (Karol Herbst) [RHEL-180328]
  - drm: Replace old pointer to new idr (Karol Herbst) [RHEL-180328]
  - drm/loongson: Use managed KMS polling (Karol Herbst) [RHEL-180328]
  - drm/xe/xelp: Fix Wa_18022495364 (Karol Herbst) [RHEL-180328]
  - drm/xe/gsc: Fix BO leak on error in query_compatibility_version() (Karol Herbst) [RHEL-180328]
  - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix potential NULL deref in xe_exec_queue_tlb_inval_last_fence_put_unlocked (Karol Herbst) [RHEL-180328]
  - drm/xe/debugfs: Correct printing of register whitelist ranges (Karol Herbst) [RHEL-180328]
  - drm/xe: Drop registration of guc_submit_wedged_fini from xe_guc_submit_wedge() (Karol Herbst) [RHEL-180328]
  - drm/xe: Use XE_WEDGED_MODE_UPON_ANY_HANG_NO_RESET enum instead of magic number (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Use EDID from VBIOS embedded panel info (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Read EDID from VBIOS embedded panel info (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow constructing DCE8 link encoder without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow constructing DCE6 link encoder without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow DCE link encoder without AUX registers (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Allow embedded connectors without DDC (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: Add fine grained flag to SMU v13.0.6 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.3.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings (Karol Herbst) [RHEL-180328]
  - drm/amd/display: properly handle family setting for early GC 11.5.4 (Karol Herbst) [RHEL-180328]
  - drm/color-mgmt: Typo s/R332/RGB332/ (Karol Herbst) [RHEL-180328]
  - drm/sysfb: ofdrm: fix PCI device reference leaks (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Only send RMA CPER when threshold is exceeded (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix missing fine-grained dpm table flag on aldebaran (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap with VRAM (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: avoid double drm_exec_fini() in userq validate (Karol Herbst) [RHEL-180328]
  - drm/i915/wm: Verify the correct plane DDB entry (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Fix parameter mismatch in panel self-refresh helper (Karol Herbst) [RHEL-180328]
  - drm/fb-helper: Fix a locking bug in an error path (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Fill DW8 fields from SMC (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Karol Herbst) [RHEL-180328]
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths (Karol Herbst) [RHEL-180328]
  - drm/panel: simple: Correct G190EAN01 prepare timing (Karol Herbst) [RHEL-180328]
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first (Karol Herbst) [RHEL-180328]
  - drm/imagination: Switch reset_reason fields from enum to u32 (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx11: look at the right prop for gfx queue priority (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Remove redundant NULL check in pending bad-bank list iteration (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Remove dead negative offset check in amdgpu_virt_init_critical_region() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Drop redundant queue NULL check in hang detect worker (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Add default case in DVI mode validation (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Update queue properties for metadata ring (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: Fix xgmi max speed reporting (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs (Karol Herbst) [RHEL-180328]
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: GFX12.1 scratch memory limit up to 57-bit (Karol Herbst) [RHEL-180328]
  - drm/amd/ras: Fix type size of remainder argument (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Removed commented line for MQD queue priority (Karol Herbst) [RHEL-180328]
  - drm/xe/xe2_hpg: Drop invalid workaround Wa_15010599737 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019386621 (Karol Herbst) [RHEL-180328]
  - drm/xe: Consolidate workaround entries for Wa_14019877138 (Karol Herbst) [RHEL-180328]
  - drm/virtio: Allow importing prime buffers when 3D is enabled (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() (Karol Herbst) [RHEL-180328]
  - dma-fence: Fix sparse warnings due __rcu annotations (Karol Herbst) [RHEL-180328]
  - drm/panel: ilitek-ili9882t: Select DRM_DISPLAY_DSC_HELPER (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/pm: add missing revision check for CI (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Make all TLB-flushes heavy-weight (Karol Herbst) [RHEL-180328]
  - drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending disable cmds (Karol Herbst) [RHEL-180328]
  - drm/bridge: tda998x: Use __be32 for audio port OF property pointer (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (Karol Herbst) [RHEL-180328]
  - drm/panel: himax-hx83102: restore MODE_LPM after sending disable cmds (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/userq: fix access to stale wptr mapping (Karol Herbst) [RHEL-180328]
  - drm/radeon: add missing revision check for CI (Karol Herbst) [RHEL-180328]
  - drm: Set old handle to NULL before prime swap in change_handle (Karol Herbst) [RHEL-180328]
  - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (Karol Herbst) [RHEL-180328]
  - drm/xe/bo: Fix bo leak on unaligned size validation in xe_bo_init_locked() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-180328]
  - drm/xe/bo: Fix bo leak on GGTT flag validation in xe_bo_init_locked() (Karol Herbst) [RHEL-180328]
  - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-180328]
  - drm/udl: Increase GET_URB_TIMEOUT (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Avoid reset in AMDGPU unload path for APUs with GFX V11 and higher. (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: validate SVM ioctl nattr against buffer size (Karol Herbst) [RHEL-180328]
  - drm/appletbdrm: Use kvzalloc for big allocations (Karol Herbst) [RHEL-180328]
  - drm/amd/display: Change dither policy for 10 bpc output back to dithering (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vce: Prevent partial address patches (Karol Herbst) [RHEL-180328]
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Add upper bound check for num_of_nodes (Karol Herbst) [RHEL-180328]
  - drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: gate VM CPU HDP flush on reset lock (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower count. (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: Use NBIF offset for register RCC_STRAP0_RCC_DEV0_EPF0_STRAP0 . (Karol Herbst) [RHEL-180328]
  - drm/amd: Add missing firmware declaration for PSP v15.0.0 (Karol Herbst) [RHEL-180328]
  - drm/amd/display: fix math_mod() using arg1 instead of arg2 (Karol Herbst) [RHEL-180328]
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (Karol Herbst) [RHEL-180328]
  - drm/i915/psr: Init variable to avoid early exit from et alignment loop (Karol Herbst) [RHEL-180328]
  - drm/imx: parallel-display: Prefer bus format set via legacy "interface-pix-fmt" DT property (Karol Herbst) [RHEL-180328]
  - drm/colorop: Fix blob property reference tracking in state lifecycle (Karol Herbst) [RHEL-180328]
  - drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() (Karol Herbst) [RHEL-180328]
  - drm/atomic: Add affected colorops with affected planes (Karol Herbst) [RHEL-180328]
  - drm/colorop: Preserve bypass value in duplicate_state() (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages (Karol Herbst) [RHEL-180328]
  - drm/gpusvm: Allow device pages to be mapped in mixed mappings after system pages (Karol Herbst) [RHEL-180328]
  - accel/ivpu: Disallow re-exporting imported GEM objects (Karol Herbst) [RHEL-180328]
  - drm/imagination: Fix segfault when updating ftrace mask (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: fix zero-size GDS range init on RDNA4 (Karol Herbst) [RHEL-180328]
  - amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2 (Karol Herbst) [RHEL-180328]
  - drm/arcpgu: fix device node leak (Karol Herbst) [RHEL-180328]
  - drm/nouveau: fix nvkm_device leak on aperture removal failure (Karol Herbst) [RHEL-180328]
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Karol Herbst) [RHEL-180328]
  - drm/amdgpu: replace PASID IDR with XArray (Karol Herbst) [RHEL-180328]
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CKI Backport Bot) [RHEL-178409] {CVE-2026-43501}
  - net/ipv6: ioam6: prevent schema length wraparound in trace fill (CKI Backport Bot) [RHEL-174787] {CVE-2026-43341}
  - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172518] {CVE-2026-31786}
  - Revert "ext4: switch to using the crc32c library" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove redundant function ext4_has_metadata_csum" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove sbi argument from ext4_chksum()" (Brian Foster) [RHEL-159116]
  - Revert "ext4: remove sb argument from ext4_superblock_csum()" (Brian Foster) [RHEL-159116]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-263.el10]
changelog:
  - mm: consider non-anon swap cache folios in folio_expected_ref_count() (Gavin Shan) [RHEL-224504]
  - dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231823] {CVE-2026-53062}
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226716] {CVE-2026-43493}
  - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231458] {CVE-2026-64277}
  - iommu/vt-d: Avoid WARNING in sva unbind path (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Add invalidation entry_num and entry_len boundary tests (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Cover invalid read counts on vEVENTQ FD (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Add boundary tests for veventq_depth (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Set upper bounds on cache invalidation entry_num and entry_len (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Clarify IOAS_MAP_FILE dma-buf support (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Destroy the pages content after detaching from dmabuf (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Break the loop on failure in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Reject invalid read count in iommufd_fault_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Reject invalid read count in iommufd_veventq_fops_read() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Set veventq_depth upper bound (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Move vevent memory allocation outside spinlock (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Fix the end_index calculation in __map_range_leaf() (Jerry Snitselaar) [RHEL-213791]
  - iommu: Handle unmap error when iommu_debug is enabled (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64152}
  - iommu: Fix up map/unmap debugging for iommupt domains (Jerry Snitselaar) [RHEL-213791]
  - iommu: Fix loss of errno on map failure for classic ops (Jerry Snitselaar) [RHEL-213791]
  - iommu: Ensure .iotlb_sync is called correctly (Jerry Snitselaar) [RHEL-213791]
  - iommu: Do not call drivers for empty gathers (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64151}
  - iommu/vt-d: Restore IOMMU_CAP_CACHE_COHERENCY (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma: Always allow DMA-FQ when iommupt provides the iommu_domain (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Avoid rewalking during map (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Directly call iommupt's unmap_range() (Jerry Snitselaar) [RHEL-213791]
  - iommu/iova: Add NULL check in iova_magazine_free() (Jerry Snitselaar) [RHEL-213791]
  - iommupt: Optimize the gather processing for DMA-FQ mode (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64186}
  - iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix illegal device-id access in IOMMU debugfs (Jerry Snitselaar) [RHEL-213791]
  - of: reserved_mem: Allow reserved_mem framework detect "cma=" kernel param (Jerry Snitselaar) [RHEL-213791]
  - iommu: Avoid copying the user array twice in the full-array copy helper (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma: Do not try to iommu_map a 0 length region in swiotlb (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53164}
  - iommu/vt-d: Fix RB-tree corruption in probe error path (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Don't split flush for amd_iommu_domain_flush_all() (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Fix data_len byte-count vs element-count mismatch (Jerry Snitselaar) [RHEL-213791]
  - drm/tegra: Fix iommu_map_sgtable() return value check (Jerry Snitselaar) [RHEL-213791]
  - gpu: host1x: Fix iommu_map_sgtable() return value check (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix premature break in init_iommu_one() (Jerry Snitselaar) [RHEL-213791]
  - iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Disable DMAR for Intel Q35 IGFX (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Bounds-check devid in __rlookup_amd_iommu() (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53283}
  - iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read (Jerry Snitselaar) [RHEL-213791]
  - dma: contiguous: Check return value of dma_contiguous_reserve_area() (Jerry Snitselaar) [RHEL-213791]
  - iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path (Jerry Snitselaar) [RHEL-213791]
  - dma-debug: fix physical address retrieval in debug_dma_sync_sg_for_device (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: direct: fix missing mapping for THRU_HOST_BRIDGE segments (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: move dma_map_resource() sanity check into debug code (Jerry Snitselaar) [RHEL-213791] {CVE-2026-64149}
  - iommu/amd: Fix precedence order in set_dte_passthrough() (Jerry Snitselaar) [RHEL-213791]
  - iommu/pages: Fix iommu_pages_flush_incoherent() for non-x86 (Jerry Snitselaar) [RHEL-213791]
  - iommufd: Fix a race with concurrent allocation and unmap (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Fix clone_alias() to use the original device's devid (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53053}
  - iommu/vt-d: Block PASID attachment to nested domain with dirty tracking (Jerry Snitselaar) [RHEL-213791] {CVE-2026-53372}
  - iommufd: Fix return value of iommufd_fault_fops_write() (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: add missing `inline` for `dma_free_attrs` (Jerry Snitselaar) [RHEL-213791]
  - iommu/amd: Block identity domain when SNP enabled (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Only handle IOPF for SVA when PRI is supported (Jerry Snitselaar) [RHEL-213791]
  - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Jerry Snitselaar) [RHEL-213791]
  - iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy} (Jerry Snitselaar) [RHEL-213791]
  - iommufd: vfio compatibility extension check for noiommu mode (Jerry Snitselaar) [RHEL-213791]
  - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent (Jerry Snitselaar) [RHEL-213791]
  - x86/sev: Fix broken SNP support with KVM module built-in (Jerry Snitselaar) [RHEL-213791]
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (Jerry Snitselaar) [RHEL-213791]
  - scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-213791]
  - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Jerry Snitselaar) [RHEL-213791]
  - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210962] {CVE-2025-21834}
  - perf/x86/intel: Enable auto counter reload for DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Disable PMI for self-reloaded ACR events (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Always reprogram ACR events to prevent stale masks (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Improve validation and configuration of ACR masks (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Fix OMR snoop information parsing issues (Michael Petlan) [RHEL-117335]
  - perf/x86/intel/uncore: Remove extra double quote mark (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Fix die ID init and look up bugs (Michael Petlan) [RHEL-115124] {CVE-2026-43079}
  - perf/x86/intel/uncore: Skip discovery table for offline dies (Michael Petlan) [RHEL-115124] {CVE-2026-43344}
  - perf/x86/intel/uncore: Fix iounmap() leak on global_init failure (Michael Petlan) [RHEL-115124]
  - perf/x86/intel: Add support for rdpmc user disable feature (Michael Petlan) [RHEL-117335]
  - perf/x86: Use macros to replace magic numbers in attr_rdpmc (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add core PMU support for Novalake (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in NVL (Michael Petlan) [RHEL-117335]
  - perf/x86/intel: Add core PMU support for DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Add support for PEBS memory auxiliary info field in DMR (Michael Petlan) [RHEL-115120]
  - perf/x86/intel: Support the 4 new OMR MSRs introduced in DMR and NVL (Michael Petlan) [RHEL-115120 RHEL-117335]
  - perf/x86/intel/uncore: Convert comma to semicolon (Michael Petlan) [RHEL-117337]
  - perf/x86/intel/uncore: Add Nova Lake support (Michael Petlan) [RHEL-117337]
  - perf/x86/intel/uncore: Add missing PMON units for Panther Lake (Michael Petlan) [RHEL-117337]
  - perf pmu: Relax uncore wildcard matching to allow numeric suffix (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Update DMR uncore constraints preliminarily (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support uncore constraint ranges (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support IIO free-running counters on DMR (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add freerunning event descriptor helper macro (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add domain global init callback (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add CBB PMON support for Diamond Rapids (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Add IMH PMON support for Diamond Rapids (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Remove has_generic_discovery_table() (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Support per-platform discovery base devices (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/uncore: Move uncore discovery init struct to header (Michael Petlan) [RHEL-115124]
  - perf/x86/intel/cstate: Add Diamond Rapids support (Michael Petlan) [RHEL-115122]
  - perf/x86/intel/cstate: Add Nova Lake support (Michael Petlan) [RHEL-120357]
  - perf/x86/intel/cstate: Add Wildcat Lake support (Michael Petlan) [RHEL-95668]
  - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188220] {CVE-2026-52923}
  - KVM: arm64: account pKVM reclaim against the VM mm (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Set IL in fake ESR for pKVM memory sharing exit (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: ptdump: Initialize parser_state before pgtable walk (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Expose shadow page tables in debugfs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: ptdump: Make KVM ptdump code s2 mmu aware (Sebastian Ott) [RHEL-180320]
  - Revert "KVM: arm64: Restore S1PIE register visibility to userspace" (Sebastian Ott) [RHEL-180320]
  - Revert "KVM: arm64: Restore TCR2_EL1 register visibility to userspace" (Sebastian Ott) [RHEL-180320]
  - KVM: selftests: Add test for KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce KVM_REG_ARM_VENDOR_HYP_BMAP_2 (Sebastian Ott) [RHEL-180320]
  - drivers/virt: pkvm: Add Kconfig dependency on DMA_RESTRICTED_POOL (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Rename PKVM_PAGE_STATE_MASK (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover guest hvcs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover forced reclaim (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Register 'selftest_vm' in the VM table (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extend pKVM page ownership selftests to cover guest donation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Add some initial documentation for pKVM (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Allow userspace to create protected VMs when pKVM is enabled (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Implement the MEM_UNSHARE hypercall for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Implement the MEM_SHARE hypercall for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Add hvc handler at EL2 for hypercalls from protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Return -EFAULT from VCPU_RUN on access to a poisoned pte (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reclaim faulting page from pKVM in spurious fault handler (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce hypercall to force reclaim of a protected page (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Fully update VNCR fixmap state in kvm_translate_vncr() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Inject SEA TTW when desc update can't write to GPA (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Restart stage-1 walk if stage-2 desc update fails (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't pass host_debug_state to BRBE world-switch routines (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Pre-check vcpu memcache for host->guest donate (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Pre-check vcpu memcache for host->guest share (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Make EL2 exception entry and exit context-synchronization events (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Annotate guest donations with handle and gfn in host stage-2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Change 'pkvm_handle_t' to u16 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce host_stage2_set_owner_metadata_locked() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Generalise kvm_pgtable_stage2_set_owner() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Avoid pointless annotation when mapping host-owned pages (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Inject SIGSEGV on illegal accesses (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Support translation faults in inject_host_exception() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Factor out pKVM host exception injection logic (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hook up reclaim hypercall to pkvm_pgtable_stage2_destroy() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce __pkvm_reclaim_dying_guest_page() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't advertise unsupported features for protected guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix block mapping validity check in stage-1 walker (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Roll back partial shares on kvm_share_hyp() failure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Avoid host/hyp share desync on unshare hypercall failure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Free hyp-share tracking node when share hypercall fails (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Flush HCR_EL2.VSE to deliver SErrors to pKVM guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Correctly identify executable PTEs at stage-2 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restore POR_EL0 access to host EL0 (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restart instruction upon race in __kvm_at_s12() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Wire AT S1E1A in the system instruction handling table (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Key CPTR_EL2.E0POE propagation on FEAT_S1POE (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: PMU: Preserve AArch32 counter low bits (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix __pkvm_init_vm error path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Reset page order in pKVM hyp_pool (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic: Free private_irqs when init fails after allocation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix __deactivate_fgt macro parameter typo (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Guard against NULL vcpu on VHE hyp panic path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Handle permission faults with guest_memfd (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Handle aborts from protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce __pkvm_host_donate_guest() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove unused PKVM_ID_FFA definition (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove is_protected_kvm_enabled() checks from hypercalls (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Expose self-hosted debug regs as RAZ/WI for protected guests (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hook up donation hypercall to pkvm_pgtable_stage2_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Split teardown hypercall into two phases (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Rename __pkvm_pgtable_stage2_unmap() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move handle check into pkvm_pgtable_stage2_destroy_range() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Ignore -EAGAIN when mapping in pages for the pKVM host (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Prevent unsupported memslot operations on protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Ignore MMU notifier callbacks for protected VMs (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Convert gmem_abort() to struct kvm_s2_fault_desc (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify integration of adjust_nested_*_perms() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Directly expose mapping prot and kill kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move device mapping management into kvm_s2_fault_pin_pfn() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Replace force_pte with a max_map_size attribute (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move kvm_s2_fault.{pfn,page} to kvm_s2_vma_info (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Restrict the scope of the 'writable' attribute (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill logging_active from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move VMA-related information to kvm_s2_fault_vma_info (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill topup_memcache from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill exec_fault from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill write_fault from kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Constrain fault_granule to kvm_s2_fault_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Replace fault_is_perm with a helper (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Move fault context to const structure (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Make fault_ipa immutable (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Kill fault->ipa (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Clean up control flow in kvm_s2_fault_map() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Hoist MTE validation check out of MMU lock path (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Optimize early exit checks in kvm_s2_fault_pin_pfn() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Initialize struct kvm_s2_fault completely at declaration (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify return logic in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Remove redundant state variables from struct kvm_s2_fault (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Simplify nested VMA shift calculation (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract page table mapping in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract stage-2 permission logic in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Isolate mmap_read_lock inside new kvm_s2_fault_get_vma_info() helper (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract PFN resolution in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Introduce struct kvm_s2_fault to user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Extract VMA size resolution in user_mem_abort() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Wake-up from WFI when iqrchip is in userspace (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix initialisation order in __pkvm_init_finalise() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix kvm_vcpu_initialized() macro parameter (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix typo in feature check comments (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Don't leak stage-2 page-table if VM fails to init under pKVM (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Disable SPE Profiling Buffer when running in guest context (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Disable TRBE Trace Buffer Unit when running in guest context (Sebastian Ott) [RHEL-180320]
  - KVM: arm64: Read PMUVer as unsigned (Sebastian Ott) [RHEL-180320]
  - arm64: cpufeature: Use pmuv3_implemented() function (Sebastian Ott) [RHEL-180320]
  - arm64: cpufeature: Make PMUVer and PerfMon unsigned (Sebastian Ott) [RHEL-180320]
  - selftests/cgroup: include slab in test_percpu_basic memory check (Waiman Long) [RHEL-154159]
  - selftests/cgroup: fix hardcoded page size in test_percpu_basic (Waiman Long) [RHEL-154159]
  - selftests/cgroup: test_zswap: wait for asynchronous writeback (Waiman Long) [RHEL-154157]
  - selftest/cgroup: fix zswap attempt_writeback() on 64K pagesize system (Waiman Long) [RHEL-154157]
  - selftest/cgroup: fix zswap test_no_invasive_cgroup_shrink on large pagesize system (Waiman Long) [RHEL-154157]
  - selftests/cgroup: replace hardcoded page size values in test_zswap (Waiman Long) [RHEL-154157]
  - selftests/cgroup: rename PAGE_SIZE to BUF_SIZE in cgroup_util (Waiman Long) [RHEL-154157]
  - selftests/cgroup: use runtime page size for zswpin check (Waiman Long) [RHEL-154157]
  - selftests/cgroup: avoid OOM in test_swapin_nozswap (Waiman Long) [RHEL-154157]
  - selftests/cgroup: skip test_zswap if zswap is globally disabled (Waiman Long) [RHEL-154157]
  - selftests/cgroup: Fix error path leaks in test_percpu_basic (Waiman Long) [RHEL-184801]
  - selftests/cgroup: Fix string comparison in write_test (Waiman Long) [RHEL-184801]
  - selftests/cgroup: Fix cg_read_strcmp() empty string comparison (Waiman Long) [RHEL-184801]
  - selftest: memcg: skip memcg_sock test if address family not supported (Waiman Long) [RHEL-184801]
  - selftests: cgroup: make test_memcg_sock robust against delayed sock stats (Waiman Long) [RHEL-184801]
  - selftests: cgroup: Add cg_read_key_long_poll() to poll a cgroup key with retries (Waiman Long) [RHEL-184801]
  - selftests: complete kselftest include centralization (Waiman Long) [RHEL-184801]
  - selftests/cgroup: conform test to KTAP format output (Waiman Long) [RHEL-184801]
  - selftests: memcg: increase error tolerance of child memory.current check in test_memcg_protection() (Waiman Long) [RHEL-184801]
  - selftests: memcg: allow low event with no memory.low and memory_recursiveprot on (Waiman Long) [RHEL-184801]
  - selftests/cgroup: use bash in test_cpuset_v1_hp.sh (Waiman Long) [RHEL-184801]
  - ipv6: Fix out-of-bound access in fib6_add_rt2node(). (Antoine Tenart) [RHEL-152712]
  - ipv6: mcast: Fix use-after-free when processing MLD queries (Antoine Tenart) [RHEL-152712]
  - ipv6: anycast: insert aca into global hash under idev->lock (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible infinite loop in fib6_select_path() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible infinite loop in rt6_fill_node() (Antoine Tenart) [RHEL-152712]
  - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-152712]
  - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-152712]
  - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-152712]
  - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: refresh hdr pointer before ioam6_event() (Antoine Tenart) [RHEL-152712]
  - ipv6: route: Unregister netdevice notifier on BPF init failure (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (Antoine Tenart) [RHEL-152712]
  - ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (Antoine Tenart) [RHEL-152712]
  - ipv6: fix potential UAF caused by ip6_forward_proxy_check() (Antoine Tenart) [RHEL-152712]
  - ipv6: Fix null-ptr-deref in fib6_mtu(). (Antoine Tenart) [RHEL-152712]
  - ipv6: update route serial number on NETDEV_CHANGE (Antoine Tenart) [RHEL-152712]
  - ipv6: Implement limits on extension header parsing (Antoine Tenart) [RHEL-152712]
  - ipv6: fix possible UAF in icmpv6_rcv() (Antoine Tenart) [RHEL-152712]
  - net: ioam6: fix OOB and missing lock (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (Antoine Tenart) [RHEL-152712]
  - ipv6: avoid overflows in ip6_datagram_send_ctl() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix data race in fib6_metric_set() using cmpxchg (Antoine Tenart) [RHEL-152712]
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Antoine Tenart) [RHEL-152712]
  - ipv6: prevent possible UaF in addrconf_permanent_addr() (Antoine Tenart) [RHEL-152712]
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Antoine Tenart) [RHEL-152712]
  - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Antoine Tenart) [RHEL-152712]
  - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Antoine Tenart) [RHEL-152712]
  - ipv6: fix a race in ip6_sock_set_v6only() (Antoine Tenart) [RHEL-152712]
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (Antoine Tenart) [RHEL-152712] {CVE-2026-43186}
  - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF (Antoine Tenart) [RHEL-152712]
  - ipv6: use the right ifindex when replying to icmpv6 from localhost (Antoine Tenart) [RHEL-152712]
  - ipv6: annotate data-race in ndisc_router_discovery() (Antoine Tenart) [RHEL-152712]
  - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (Antoine Tenart) [RHEL-152712]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-264.el10]
changelog:
  - ip6_gre: Use cached t->net in ip6erspan_changelink(). (Guillaume Nault) [RHEL-144808]
  - selftests: net: Add test cases for link and peer netns (Guillaume Nault) [RHEL-144808]
  - selftests: net: Add python context manager for netns entering (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Create link directly in target net namespace (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Remove "net" from newlink params (Guillaume Nault) [RHEL-144808]
  - net: xfrm: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ipv6: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ipv6: Init tunnel link-netns before registering dev (Guillaume Nault) [RHEL-144808]
  - net: ip_tunnel: Use link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: ip_tunnel: Don't set tunnel->net in ip_tunnel_init() (Guillaume Nault) [RHEL-144808]
  - ieee802154: 6lowpan: Validate link netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - net: Use link/peer netns in newlink() of rtnl_link_ops (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Pack newlink() params into struct (Guillaume Nault) [RHEL-144808]
  - rtnetlink: Lookup device in target netns when creating link (Guillaume Nault) [RHEL-144808]
  - accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: fix missing newline in pr_err message (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix runtime suspend deadlock when there is pending job (Peter Colberg) [RHEL-222546] {CVE-2026-43446}
  - accel/amdxdna: Split mailbox channel create function (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix major version check on NPU1 platform (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix NULL pointer dereference of mgmt_chann (Peter Colberg) [RHEL-222546] {CVE-2026-23328}
  - accel/amdxdna: Fill invalid payload for failed command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use a different name for latest firmware (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Validate command buffer payload count (Peter Colberg) [RHEL-222546] {CVE-2026-23424}
  - accel/amdxdna: Prevent ubuf size overflow (Peter Colberg) [RHEL-222546] {CVE-2026-23280}
  - accel/amdxdna: Fix out-of-bounds memset in command slot handling (Peter Colberg) [RHEL-222546] {CVE-2026-23288}
  - accel/amdxdna: Fix command hang on suspended hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix suspend failure after enabling turbo mode (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix dead lock for suspend and resume (Peter Colberg) [RHEL-222546] {CVE-2026-23295}
  - accel/amdxdna: Reduce log noise during process termination (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix crash when destroying a suspended hardware context (Peter Colberg) [RHEL-222546] {CVE-2026-23341}
  - accel/amdxdna: Switch to always use chained command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove buffer size check when creating command BO (Peter Colberg) [RHEL-222546]
  - Convert more 'alloc_obj' cases to default GFP_KERNEL arguments (Peter Colberg) [RHEL-222546]
  - Convert 'alloc_flex' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546]
  - Convert 'alloc_obj' family to use the new default GFP_KERNEL argument (Peter Colberg) [RHEL-222546]
  - treewide: Replace kmalloc with kmalloc_obj for non-scalar types (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Move RPM resume into job run function (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect DPM level after suspend/resume (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect error code returned for failed chain command (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove hardware context status (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix memory leak in amdxdna_ubuf_map (Peter Colberg) [RHEL-222546] {CVE-2026-45908}
  - accel/amdxdna: Stop job scheduling across aie2_release_resource() (Peter Colberg) [RHEL-222546] {CVE-2026-45980}
  - accel/amdxdna: Hold mm structure across iommu_sva_unbind_device() (Peter Colberg) [RHEL-222546] {CVE-2026-45931}
  - accel/amdxdna: Fix notifier_wq flushing warning (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Update firmware version check for latest firmware (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Update message DMA buffer allocation (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enable hardware context priority (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enable temporal sharing only mode (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove NPU2 support (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove amdxdna_flush() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix potential NULL pointer dereference in context cleanup (Peter Colberg) [RHEL-222546] {CVE-2025-71308}
  - accel/amdxdna: Fix race where send ring appears full due to delayed head update (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix cu_idx being cleared by memset() during command setup (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix race condition when checking rpm_on (Peter Colberg) [RHEL-222546] {CVE-2025-71303}
  - accel/amdxdna: Fix tail-pointer polling in mailbox_get_msg() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Poll MPNPU_PWAITMODE after requesting firmware suspend (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Block running under a hypervisor (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix deadlock between context destroy and job timeout (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Clear mailbox interrupt register during channel creation (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Treat power-off failure as unrecoverable error (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix dma_fence leak when job is canceled (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support preemption requests (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add IOCTL parameter for telemetry data (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add IOCTL parameter for resource data (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware specific attributes (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use MSG_OP_CHAIN_EXEC_NPU when supported (Peter Colberg) [RHEL-222546]
  - drm: include drm_print.h where needed (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect command state for timed out job (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix uninitialized return value (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect return value in aie2_hwctx_sync_debug_bo() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support firmware debug buffer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support getting last hardware error (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Resume power for creating and destroying hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enhance runtime power management (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Call dma_buf_vmap_unlocked() for imported object (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array() (Peter Colberg) [RHEL-222546] {CVE-2025-68731}
  - accel/amdxdna: Add ioctl DRM_IOCTL_AMDXDNA_GET_ARRAY (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use int instead of u32 to store error codes (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect type used for a local variable (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add a function to walk hardware contexts (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Unify pm and rpm suspend and resume callbacks (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Delete pci_free_irq_vectors() (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support user space allocated buffer (Peter Colberg) [RHEL-222546]
  - drm/sched: Rename DRM_GPU_SCHED_STAT_NOMINAL to DRM_GPU_SCHED_STAT_RESET (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Revise device bo creation and free (Peter Colberg) [RHEL-222546]
  - drm/sched: Store the drm client_id in drm_sched_fence (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect PSP firmware size (Peter Colberg) [RHEL-222546]
  - iommu: Remove IOMMU_DEV_FEAT_SVA (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support submit commands without arguments (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Fix incorrect size of ERT_START_NPU commands (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add BO import and export (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: s/drm_gem_v[un]map_unlocked/drm_gem_v[un]map/ (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Check interrupt register before mailbox_rx_worker exits (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add missing include linux/slab.h (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add MODULE_FIRMWARE() declarations (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Refactor hardware context destroy routine (Peter Colberg) [RHEL-222546]
  - drm/sched: Use struct for drm_sched_init() params (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare sched_ops as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Remove casting mailbox payload pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Return error when setting clock failed for npu1 (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare npu6_dev_priv as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add __user to second parameter of aie2_query_status (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare force_cmdlist as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Use rcu_access_pointer for __rcu pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare aie2_max_col as static (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare mailbox register base as __iomem pointer (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Declare npu device profile as static variables (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: include linux/slab.h (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add zero check for pad in ioctl input structures (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Read firmware interface version from registers (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Enhance power management settings (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Replace idr api with xarray (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add RyzenAI-npu6 support (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: use modern PM helpers (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add include interrupt.h to amdxdna_mailbox.c (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add query firmware version (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Replace mmput with mmput_async to avoid dead lock (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add device status for aie2 devices (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add query functions (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add error handling (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add suspend and resume (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add command execution (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add GEM buffer object management (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware context (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add hardware resource solver (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Support hardware mailbox (Peter Colberg) [RHEL-222546]
  - accel/amdxdna: Add a new driver for AMD AI Engine (Peter Colberg) [RHEL-222546]
  - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190192]
  - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190192] {CVE-2026-53246}
  - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234289] {CVE-2026-64564}
  - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230267] {CVE-2026-64276}
  - sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214458]
  - redhat/configs: re-enable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186753]
  - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-137943]
  - rh_message.h: Disable ConnectX-10 NVLink-C2C device (Benjamin Poirier) [RHEL-211847]
  - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Aidan Wallace) [RHEL-192401] {CVE-2026-53359}
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186699] {CVE-2026-46113}
  - tpm_ffa_crb: access tpm service over FF-A direct message request v2 (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits (Jennifer Berringer) [RHEL-183180]
  - firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Honor partition info descriptor size (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Defer probe until pKVM is initialized (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Set the core device as FF-A device parent (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Register core as a platform driver (Jennifer Berringer) [RHEL-179031]
  - Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix sched-recv callback partition lookup (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Snapshot notifier callbacks under lock (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Align RxTx buffer size before mapping (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Validate framework notification message layout (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Keep framework RX release under lock (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Avoid collapsing NPI work from different CPUs (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Use the correct buffer size during RXTX_MAP (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Correct 32-bit response handling in NOTIFICATION_INFO_GET (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Tie FF-A version checks to specific features (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Unmap Rx/Tx buffers on init failure (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Add support for IMPDEF value in the memory access descriptor (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (Jennifer Berringer) [RHEL-179031]
  - firmware: arm_ffa: Helper to check if a partition can receive REQUEST2 messages (Jennifer Berringer) [RHEL-179031]
  - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188204] {CVE-2026-52924}
  - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171511] {CVE-2026-31669}
  - net: add prefetch() in skb_defer_free_flush() (Antoine Tenart) [RHEL-123212]
  - net: add NUMA awareness to skb_attempt_defer_free() (Antoine Tenart) [RHEL-123212]
  - net: use llist for sd->defer_list (Antoine Tenart) [RHEL-123212]
  - net: make softnet_data.defer_count an atomic (Antoine Tenart) [RHEL-123212]
  - l2tp: Drop large packets with UDP encap (Guillaume Nault) [RHEL-152732]
  - l2tp: avoid one data-race in l2tp_tunnel_del_work() (Guillaume Nault) [RHEL-152732]
  - l2tp: Fix memleak in l2tp_udp_encap_recv(). (Guillaume Nault) [RHEL-152732]
  - mpls: add missing unregister_netdevice_notifier to mpls_init (Guillaume Nault) [RHEL-152709]
  - ppp: fix race conditions in ppp_fill_forward_path (Guillaume Nault) [RHEL-152724]
  - ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152736]
  - selftests: seg6: fix instaces typo in comments (CKI Backport Bot) [RHEL-152736]
  - seg6: fix lenghts typo in a comment (CKI Backport Bot) [RHEL-152736]
  - selftests: seg6: Add test cases for End.X with link-local nexthop (CKI Backport Bot) [RHEL-152736]
  - seg6: Allow End.X behavior to accept an oif (CKI Backport Bot) [RHEL-152736]
  - seg6: Call seg6_lookup_any_nexthop() from End.X behavior (CKI Backport Bot) [RHEL-152736]
  - seg6: Extend seg6_lookup_any_nexthop() with an oif argument (CKI Backport Bot) [RHEL-152736]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-17
changelog:
  - Support storing of __crc_* symbols in sections other than .rodata.
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-19
changelog:
  - Capture local __crc_* symbols for "Provides: kernel()".
  - Add support for XZ compression for the symvers file.
  - Fix "Provides: kernel()" generation when both __kcrctab and __kcrctab_gpl
    are present.
  - Fix regression for "Provides:" generation in cases when modversions are stored
    in a section that is over 64K in size.
  - Speedup and cleanup changes in find-provides.ksyms and find-requires.ksyms.
  - Fix regex usage in kmod.attr. (Denys Vlasenko)
  - Implement modalias "Provides:" grouping. (Denys Vlasenko)
  - Speedup and cleanup changes in modalias.prov and kmod.attr. (Denys Vlasenko)


author: Denys Vlasenko <dvlasenk@redhat.com> - 1.0-28
changelog:
  - find-requires.ksyms: remove /tmp/{find-requires.ksyms,mod_req}.* temporary files
  - macros.kmp: do not run `rpm -qa`
    Resolves: RHEL-113056


author: Denys Vlasenko <dvlasenk@redhat.com> - 1.0-28
changelog:
  - find-requires.ksyms: remove /tmp/{find-requires.ksyms,mod_req}.* temporary files
  - macros.kmp: do not run `rpm -qa`
  Resolves: RHEL-113056


author: keycloak-httpd-client-install fails to build with Python 3.12 - 1.1.14
changelog:
  - Resolves: rhbz#2155009 - keycloak-httpd-client-install fails to build with
    Python 3.12: ModuleNotFoundError: No module named 'distutils'


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Marek Safarik <msafarik@redhat.com> - 7.12.1-16
changelog:
  - Added manpages for keylime services and the tenant
  - Added support for ECC attestation
  - Fixed man page RST formatting for rst2man compatibility


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Julien Rische <jrische@redhat.com> - 1.21.3-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145356
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-145358
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145397


author: Julien Rische <jrische@redhat.com> - 1.21.3-11
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171587 RHEL-171595


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Mike FABIAN <mfabian@redhat.com> - 0.0.62-1
changelog:
  - Update to 0.0.62
  - Get translation changes from CLDR
  - Add more translations from CLDR
  - Add Norwegian keyboard layout to keyboards.xml
    (Resolves: https://github.com/mike-fabian/langtable/issues/16)
  - Add Hang script to Southern Aymara


author: Mike FABIAN <mfabian@redhat.com> - 0.0.63-1
changelog:
  - Update to 0.0.63
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Japanese: prefer anthy over kkc
    (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
  - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
    (Resolves: https://github.com/mike-fabian/langtable/issues/18)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.64-1
changelog:
  - Update to 0.0.64
  - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
    (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.65-1
changelog:
  - Update to 0.0.65
  - Add wuu, tok, glk, gbm, ssy
  - Remove aa_ER.UTF-8@saaho
  - Add kv_RU.UTF-8, chr_RU.UTF-8
  - Add EU, EZ
  - Improve README and Makefile (Resolves: https://github.com/mike-
    fabian/langtable/issues/19)
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 2.015-16
changelog:
  - Convert to new fonts packaging guidelines
  - Migrate to SPDX license expression
  - Drop very very old obsoletes for google-lato-fonts
  - Add gating CI tests in Fedora


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Fedor Vorobev <fvorobev@redhat.com> - 1.8.3-19
changelog:
  - Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
    query-response matching (RHEL-210693)


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-20
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113472 - "cannot seek on data source" in TLS lftp sessions


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Olivier Fourdan <ofourdan@redhat.com> - 2.0.6-6
changelog:
  - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
    Resolves: https://redhat.atlassian.net/browse/RHEL-191884
    Resolves: https://redhat.atlassian.net/browse/RHEL-191931
    Resolves: https://redhat.atlassian.net/browse/RHEL-191945


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2.0.6-7
changelog:
  - CVE fix for: CVE-2026-59679, CVE-2026-44950
    Resolves: https://redhat.atlassian.net/browse/RHEL-221946
    Resolves: https://redhat.atlassian.net/browse/RHEL-222023


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.4.0-2
changelog:
  - rebase to 2.4.0 to fix the following CVEs:
    - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions
    - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.6.0-2
changelog:
  - rebase to 2.6.0 to fix the following CVEs:
    - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-3
changelog:
  - Fix creating MD RAID arrays without specifying bitmap localtion
    Resolves: RHEL-31379
  - crypto: Fix double free in bd_crypto_luks_remove_key
    Resolves: RHEL-31489
  - tests: Fix running tests without ntfsprogs
    Resolves: RHEL-32875


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Hans de Goede <hdegoede@redhat.com> - 0.3.1-3
changelog:
  - Add patches to fix pipewire keeping UVC cameras open all the time causing
    significant laptop battery drain:
    https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669


author: Kate Hsuan <hpa@redhat.com> - 0.3.2-2
changelog:
  - Disable lc-compliance
  - Removed the gtest dependency from the libcamera-tools package
  - Resolves: RHEL-73503


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Adam Prikryl <aprikryl@redhat.com> - 0.9.3-2
changelog:
  - Rebuild to enable netcap --advanced (kernel-headers now provides vm_sockets.h)
    Resolves: RHEL-208587
  - Fix build failure on non-BPF architectures
    Resolves: RHEL-185783


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.0.0-12
changelog:
  - RHEL-212655 CVE-2026-64612 libcupsfilters: Handle libpng errors
    via longjmp()/setjmp() to prevent process abort on malformed PNG


author: Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
changelog:
  - disable OpenSSL Engine API support (RHEL-30436)
  - setopt: Fix disabling all protocols (CVE-2024-2004)
  - http2: push headers better cleanup (CVE-2024-2398)


author: Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
changelog:
  - add gating configuration (RHEL-52103)
  - sigpipe: init the struct so that first apply ignores (RHEL-53327)


author: Jacek Migacz <jmigacz@redhat.com> - 8.12.1-2
changelog:
  - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
    (temporary revert to workaround another issue RHEL-85608)


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.7-1
changelog:
  - Rebase to libguestfs 1.59.7
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.8-1
changelog:
  - Rebase to libguestfs 1.59.8
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.59.9-1
changelog:
  - Rebase to libguestfs 1.59.9
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.60.1-1
changelog:
  - Rebase to libguestfs 1.60.1
    Synchronize spec file with Fedora
    resolves: RHEL-153358
  - Detect Windows Defender antivirus
    resolves: RHEL-129145
  - Fix CHS geometry error for Veritas/Sun partitions
    resolves: RHEL-165220
  - Fix binary LUKS keys
    resolves: RHEL-171895
  - Ignore RHEL 7 XFS AGFL inconsistency
    resolves: RHEL-178287
  - Allow shell commands with immutable resolv.conf
    resolves: RHEL-178556


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Richard W.M. Jones <rjones@redhat.com> - 10.0-2
changelog:
  - Import package into CentOS Stream 10
  - Remove resolves refs to work around check-gitbz bug (RHELBLD-14966)
  - Add gating tests
  - Set ExclusiveArch/ExcludeArch to the same as for libguestfs


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.6-1
changelog:
  - Rebase to libnbd 1.25.6
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057


author: Richard W.M. Jones <rjones@redhat.com> - 1.25.7-1
changelog:
  - Rebase to libnbd 1.25.7
  - Synch spec file with Fedora
    resolves: RHEL-153363
  - Fix command injection in nbd+ssh URIs
    resolves: RHEL-189057
  - Fix regression in nbd+ssh URIs caused by preceding change
    resolves: RHEL-217012


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Jan Macku <jamacku@redhat.com> 1.68.0-6
changelog:
  - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131432)
  - CVE-2025-65018: heap buffer overflow (RHEL-131445)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-10
changelog:
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.40-13
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161334)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Attila Lakatos <alakatos@redhat.com> - 1.11.0-9
changelog:
  - Backport: fix SSL_CONF_cmd/SSL_new ordering in OpenSSL client connect path
    Resolves: RHEL-188813


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.0-1
changelog:
  - Rebase to 0.12.0
    Resolves: RHEL-133421, RHEL-70825, RHEL-130042
  - Add a Requires for crypto-policies instead of a Recommends
    Resolves: RHEL-139045


author: Pavol Žáčik <pzacik@redhat.com> - 0.12.2-1
changelog:
  - Rebase to 0.12.2
    Resolves: RHEL-148617
    Resolves: RHEL-213177
    Resolves: RHEL-213149
    Resolves: RHEL-213147
    Resolves: RHEL-213118
    Resolves: RHEL-213113
    Resolves: RHEL-213080
    Resolves: RHEL-213048
    Resolves: RHEL-213040
    Resolves: RHEL-213031
    Resolves: RHEL-213030
    Resolves: RHEL-213005


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-9
changelog:
  - backport documentation change for CVE-2023-52355 (RHEL-179103)
  - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159311)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-11
changelog:
  - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189377)
  - make sure documentation is updated during build for CVE-2023-52355 (RHEL-179103)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.1-1
changelog:
  - Version 2.11.1 (RHEL-150897)
  - udiskslinuxnvmecontroller: Fix sanitize job start (RHEL-69113)
  - udiskslinuxpartitiontable: Fix missing job completion (RHEL-124987)
  - udiskslinuxdevice: multipath handling fixes (RHEL-128598)
  - lvm2: Prevent a segfault on discarded probe output (RHEL-138293)
  - udisksmodulemanager: Silence console warnings when requested module is not available (RHEL-144145)
  - tests: Make sure to load sr_mod for cdrom tests (RHEL-153132)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
  - qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
  - qemu_firmware: Move format=raw compat exception (RHEL-82645)
  - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
  - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
  - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
  - tests: Add firmware-auto-bios-rw (RHEL-82645)
  - tests: Add firmware-manual-bios-rw (RHEL-82645)
  - domain_validate: Reject read/write ROMs (RHEL-82645)
  - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
  - domain_validate: Reject ROMs with format other than raw (RHEL-82645)
  - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
  - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
  - schemas: Allow templateFormat without template path (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
  - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
  - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
  - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
  - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
  - qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
  - qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
  - qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
  - qemu_firmware: Prefer template format to loader format (RHEL-82645)
  - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
  - qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
  - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
  - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
  - tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
  - tests: Add firmware-manual-efi-tdx (RHEL-82645)
  - qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
  - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
  - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
  - schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
  - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Document firmwareFeature element for domaincaps (RHEL-82645)
  - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
  - docs: Improvement related to firmware selection (RHEL-82645)
  - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
  - conf: Move type=rom default for loader to drivers (RHEL-82645)
  - tests: Rename custom JSON firmware descriptors (RHEL-82645)
  - schema: Introduce osnvram define (RHEL-82645)
  - conf: Parse and format varstore element (RHEL-82645)
  - conf: Update validation to consider varstore element (RHEL-82645)
  - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
  - qemu: Validate presence of uefi-vars device (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
  - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
  - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
  - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
  - qemu_firmware: Split sanity check (RHEL-82645)
  - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
  - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
  - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
  - conf: Include varstore element in domcaps (RHEL-82645)
  - qemu: Fill in varstore element in domcaps (RHEL-82645)
  - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
  - qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
  - qemu_firmware: Fill in varstore information (RHEL-82645)
  - qemu: Introduce varstoreDir (RHEL-82645)
  - qemu_firmware: Generate varstore path when necessary (RHEL-82645)
  - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
  - qemu: Create and delete varstore file (RHEL-82645)
  - security: Mark ROMs as read only when using AppArmor (RHEL-82645)
  - security: Handle varstore file (RHEL-82645)
  - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
  - qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
  - include: Mention varstore where applicable (RHEL-82645)
  - virsh: Update for varstore handling (RHEL-82645)
  - domain_conf: initialize network hostdev private data (RHEL-151916)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-12
changelog:
  - test: Default to ROM type for loader (RHEL-82645)
  - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)


author: Jiri Denemark <jdenemar@redhat.com> - 12.2.0-1
changelog:
  - Rebased to libvirt-12.2.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-147660
      RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832, RHEL-154252
      RHEL-154292, RHEL-154549, RHEL-156689, RHEL-156800, RHEL-156804
      RHEL-159134


author: Jiri Denemark <jdenemar@redhat.com> - 12.4.0-1
changelog:
  - Rebased to libvirt-12.4.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-76301, RHEL-114415, RHEL-118303, RHEL-145306, RHEL-145937
      RHEL-147660, RHEL-147661, RHEL-148219, RHEL-150883, RHEL-153832
      RHEL-154252, RHEL-154292, RHEL-154549, RHEL-155804, RHEL-155809
      RHEL-156689, RHEL-156800, RHEL-156804, RHEL-159134, RHEL-164023
      RHEL-169588, RHEL-170773, RHEL-170993, RHEL-174300, RHEL-176438


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-1
changelog:
  - Rebased to libvirt-12.5.0 (RHEL-156861)
  - The rebase also fixes the following bugs:
      RHEL-180448, RHEL-181350, RHEL-185108, RHEL-186015, RHEL-187057


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-2
changelog:
  - tools: virsh: fix crash on error (RHEL-234911)
  - conf: Include check for pci_bus in virDomainIOMMUDefEquals() (RHEL-138901)
  - qemu: introduce QEMU_CAPS_DEVICE_ARM_SMMUV3 (RHEL-138901)
  - qemu: introduce QEMU_CAPS_ARM_SMMUV3_SMMU_PER_BUS (RHEL-138901)
  - qemu: introduce QEMU_CAPS_ARM_SMMUV3_ACCEL (RHEL-138901)
  - qemu: Add support for HW-accelerated nested SMMUv3 (RHEL-138901)
  - tests: qemuxmlconfdata: provide HW-accel smmuv3 sample XML and CLI args (RHEL-138901)
  - conf: schemas: Allow '.' in schema for CPU flag name (RHEL-222549)
  - tests: capabilityschemadata: Add a real test example (RHEL-222549)
  - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622)


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-3
changelog:
  - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242545)
  - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242545)
  - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242545)
  - qemu: Remove 'allowReboot' field (RHEL-242545)
  - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242545)
  - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242545)
  - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242545)
  - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242545)
  - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242545)
  - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242545)
  - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242545)
  - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242545)
  - Add support for keeping VM running when panic notifier is used (RHEL-242545)
  - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-185108)
  - qemu: move qemuAgent*InfoFormatParams to hypervisor/qemu_agent.c (RHEL-235731)
  - Add guest device info to virDomainGetGuestInfo (RHEL-235731)
  - qemu_agent: Introduce guest-get-devices (RHEL-235731)
  - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-235731)
  - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-235731)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-235731)


author: Jiri Denemark <jdenemar@redhat.com> - 12.5.0-4
changelog:
  - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (CVE-2026-18917, RHEL-245273)


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Michal Ruprich <mruprich@redhat.com> - 2.1.148-4
changelog:
  - DoS or arbitrary code execution via maliciously crafted LYB binary blob
  - Resolves: RHEL-177026 - CVE-2026-44673


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-6
changelog:
  - add support for dropping root privileges (disabled by default) (RHEL-12183)
  - create linuxptp user and /run/ptp directory


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-9
changelog:
  - fix phc2sys service to allow clocks specified by interface (RHEL-165199)
  - fix high CPU usage by ptp4l when link is down (RHEL-173418)
  - fix phc2sys to not get stuck in static mode (RHEL-187951)


author: Brian C. Lane <bcl@redhat.com> 40.5.4-1
changelog:
  - tito: Add tito to container's test-packages (bcl)
    Related: RHEL-31830
  - creator: Fix pylint error in run_creator (bcl)
    Related: RHEL-31830
  - livemedia-creator: Check for BIOS vs. UEFI qemu support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Enable s390x virt support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Make use of virtio devices more generic (bcl)
    Related: RHEL-31830
  - Set requirement on lorax-templates-rhel for prefixdevname change (bcl)
    Related: RHEL-30010


author: Brian C. Lane <bcl@redhat.com> 40.5.5-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-35396
  - docs: Update livemedia-creator documentation for RHEL 10 (bcl)
    Related: RHEL-31853
  - livemedia-creator: The --make-tar option requires tar (bcl)
    Related: RHEL-31853
  - docs: Update example kickstarts for RHEL/CentOS (bcl)
    Resolves: RHEL-31853
  - lorax: Change default rootfs size to 3GiB (bcl)
    Resolves: RHEL-32504


author: Brian C. Lane <bcl@redhat.com> 40.5.6-1
changelog:
  - New lorax documentation - 40.5.6 (bcl)
    Related: RHEL-48606
  - ltmpl: Remove * from docstring (bcl)
    Related: RHEL-48606
  - docs: Update intersphinx and add _static dir (bcl)
    Related: RHEL-48606
  - docs: Document --rootfs-type options (bcl)
    Related: RHEL-48606
  - erofs: Use dedupe and all-fragments options (bcl)
    Related: RHEL-48606
  - imgutils: mkfs.erofs options should come first (bcl)
    Related: RHEL-48606
  - Accept but ignore the old --squashfs-only argument (awilliam)
    Related: RHEL-48606
  - Add compression.erofs section to lorax.conf (bcl)
    Resolves: RHEL-48606
  - Add erofs and erofs-ext4 support to --rootfs-type (bcl)
    Related: RHEL-48606
  - Replace squashfs_only with rootfs_type (bcl)
    Related: RHEL-48606
  - imgutils: Add mkerofs function and test (bcl)
    Related: RHEL-48606
  - runtime-postinstall: Make sure blacklist_exceptions has been removed (jstodola)
    Resolves: RHEL-53721


author: Brian C. Lane <bcl@redhat.com> 40.5.7-1
changelog:
  - templates: Sync template changes from lorax-templates-rhel (bcl)
    Resolves: RHEL-54713
  - tests: Add a test to make sure redhat-release-eula isn't included (bcl)
    Related: RHEL-54381


author: Brian C. Lane <bcl@redhat.com> 40.5.8-1
changelog:
  - tests: Fix mkksiso unit test (bcl)
    Related: RHEL-61778
  - pylint: Print astroid version (bcl)
    Related: RHEL-61778
  - Extend help for --updates and --ks parameters (jkonecny)
    Related: RHEL-61778
  - Fix --updates the updates image wasn't loaded (jkonecny)
    Resolves: RHEL-61778
  - Implement --replace also for S390 (sebastian.stark)
    Related: RHEL-61778
  - mkksiso: option --replace to replace arbitrary text in boot config.  (sebastian.stark)
    Related: RHEL-61778
  - livemedia: Add isomd5sum (bcl)
    Resolves: RHEL-58896


author: Brian C. Lane <bcl@redhat.com> 40.5.9-1
changelog:
  - tests: Swap nomodeset for inst.text in mkksiso test data (bcl)
    Related: RHEL-66603
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: RHEL-66603
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.10-1
changelog:
  - erofs: Change the erofs compression default to zstd (bcl)
    Related: RHEL-48606
  - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl)
    Related: RHEL-66603
  - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl)
    Related: RHEL-66603
  - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.11-1
changelog:
  - erofs: Make smaller lzma erofs images by default (bcl)
    Related: RHEL-48606
  - Revert "erofs: Change the erofs compression default to zstd" (bcl)
    Related: RHEL-48606


author: Brian C. Lane <bcl@redhat.com> 40.5.12-1
changelog:
  - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl)
    Resolves: RHEL-83202
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl)
    Resolves: RHEL-83519


author: Brian C. Lane <bcl@redhat.com> 40.5.14-1
changelog:
  - New lorax documentation - 40.5.14 (bcl)
    Related: RHEL-130954
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-126547
    Resolves: RHEL-130954
  - livemedia.ks: Increase size of root partition in example live kickstart (bcl)
    Resolves: RHEL-142732
  - executils: decoding after deserialization (oleg.sviridov)
    Resolves: RHEL-121650


author: Brian C. Lane <bcl@redhat.com> 40.5.15-1
changelog:
  - executils: Ignore utf-8 decode errors (bcl)
    Resolves: RHEL-121650
  - executils: Remove binary_output flag (bcl)
    Related: RHEL-121650
  - logging: Set encoding=UTF-8 on FileHandler (bcl)
    Related: RHEL-121650
  - executils: Set encoding to UTF-8 for _run_program (bcl)
    Related: RHEL-121650


author: Brian C. Lane <bcl@redhat.com> 40.5.17-1
changelog:
  - creator: Use safe_joinpaths in mount_boot_part_over_root (bcl)
    Resolves: RHEL-238020
  - creator: Use safe_joinpaths in make_livecd (bcl)
    Related: RHEL-238020
  - creator: Use safe_joinpaths in make_live_images (bcl)
    Related: RHEL-238020
  - ltmpl: Check for paths inside outroot on hardlink, symlink, copy, move (bcl)
    Related: RHEL-238020
  - sysutils: Add safe_joinpaths function (bcl)
    Related: RHEL-238020
  - ltmpl: Add tests for access outside outroot (bcl)
    Related: RHEL-238020
  - treebuilder: Check for symlink when writing module-info (bcl)
    Related: RHEL-238020
  - findkernels: Exclude kernel symlinks pointing outside root (bcl)
    Related: RHEL-238020
  - novirt_install: Use remove on /tmp paths and /mnt/sysimage (bcl)
    Related: RHEL-238020
  - sysutils: Add a test for remove and symlinked directories (bcl)
    Related: RHEL-238020


author: Brian C. Lane <bcl@redhat.com> 40.5.18-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Resolves: RHEL-224460
    Related: RHEL-224409


author: Brian C. Lane <bcl@redhat.com> 40.5.19-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-245277
    Resolves: RHEL-224409


author: Brian C. Lane <bcl@redhat.com> - 10.0-53
changelog:
  - runtime-cleanup: fonttosfnt no longer installed (bcl)
    Resolves: RHEL-54717
  - Use the same page args in all the per-arch templates (bcl)
    Resolves: RHEL-54535
  - Remove manual /root/lorax-packages.log creation (bcl)
    Resolves: RHEL-54534
  - Remove libuser.conf (bcl)
    Resolves: RHEL-54533


author: Brian C. Lane <bcl@redhat.com> - 10.0-55
changelog:
  - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl)
    Related: RHEL-67586
  - tests: Fix the repos used for the test (bcl)
    Related: RHEL-67586
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-67586


author: Brian C. Lane <bcl@redhat.com> - 10.1-1
changelog:
  - Bump release version to 10.1 (bcl)
    Related: RHEL-91929
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91929


author: Brian C. Lane <bcl@redhat.com> - 10.1-3
changelog:
  - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk)
    Resolves: RHEL-102872
  - runtime-postinstall: allow pipewire to run as root (awilliam)
    Resolves: RHEL-102419
  - runtime-cleanup: Do not clean up rpm binaries (bcl)
    Resolves: RHEL-101695


author: Brian C. Lane <bcl@redhat.com> - 10.2-1
changelog:
  - Do not remove SELinux from the runtime (ppolawsk)
    Resolves: RHEL-126547
  - Bump release version to 10.2 (bcl)
    Related: RHEL-126547


author: Brian C. Lane <bcl@redhat.com> - 10.3-1
changelog:
  - Bump release version to 10.3 (bcl)
    Related: RHEL-163726
  - Add templates and subpackage for 64k flavor aarch64 kernel (bcl)
    Resolves: RHEL-163726


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 0:1.6.23-8
changelog:
  - Fix timing side-channel in SASL password database authentication
    (CVE-2026-47783)
  - Resolves: RHEL-179085


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Jocelyn Falempe <jfalempe@redhat.com> - 26.1.1-1
changelog:
  - update to 26.1.1
  - remove patches that are in upstream
  - remove vdpau
  - update version of dependencies
  - update rust libwrap filename


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.0.0-1
changelog:
  - RHEL-83547 - Rebase mingw-qemu-ga-win to QEMU 10.0.0 
  - RHEL-96980 - mingw-qga: Drop mingw-pixman build deps
  - RHEL-98947 - [mingw-qemu-ga-win] MSI installer ignore VSS installation result 
  - RHEL-11824 - [QGA] VSS installation retry, if previously VSS service was not un-registered correctly


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.1.0-1
changelog:
  - RHEL-111001 Rebase mingw-qemu-ga-win to QEMU 10.1.0
  - RHEL-107458 [mingw-qemu-ga-win] QAPI error desc does not contain Windows error
  - RHEL-107446 QGA VSS wasn't removed if the QGA installation fail and quit
  - RHEL-107215 Fix don't daemonize before channel is initialized patch for Windows behavior


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.2.1-1
changelog:
  - RHEL-148234 Move CoInitialize/CoInitializeSecurity to main process thread 
  - RHEL-56925 Implement guest-network-get-route for Windows


author: Joe Orton <jorton@redhat.com> - 1.14.2-21
changelog:
  - restore plaintext password storage by default (per upstream)
  - restrict symbols exposed by DSOs built for httpd


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-3
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-4
changelog:
  - Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory
    Increase (CVE-2025-53020)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-5
changelog:
  - Resolves: RHEL-134484 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.17-1
changelog:
  - Rebase to nbdkit 1.45.17
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-1
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-2
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-3
changelog:
  - Rebase to nbdkit 1.46.1
  - Backport nbdkit_debug_hexdiff and nbdkit_name from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Josef Ridky <jridky@redhat.com> - 1:5.9.4-20
changelog:
  - revert default snmpd.conf change from -15 that restricted SNMP view
    to system MIB only, breaking third-party MIBs (RHEL-86820)


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-5
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127093)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
  - Add requires for selinux-policy (RHEL-127093)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-6
changelog:
  - nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
  - nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-7
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158528)
  - nfsrahead: zero-initialise device_info struct (RHEL-158528)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158528)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-9
changelog:
  - nfsd: don't assume service is running when setting thread count to 0 (RHEL-174806)
  - Pass ignore_hosts to export_create() in export_read() (RHEL-223703)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-6
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: pdancak <pdancak@redhat.com> - 2:1.26.3-7
changelog:
  - RHEL-159548 - CVE-2026-27654 nginx: NGINX: Denial of Service or file
    modification via buffer overflow in ngx_http_dav_module


author: pdancak <pdancak@redhat.com> - 2:1.26.3-8
changelog:
  - RHEL-159527 - CVE-2026-27784 nginx: NGINX: Denial of Service due to
    memory corruption via crafted MP4 file


author: pdancak <pdancak@redhat.com> - 2:1.26.3-9
changelog:
  - RHEL-159435 - CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: pdancak <pdancak@redhat.com> - 2:1.26.3-10
changelog:
  - RHEL-157876 CVE-2026-32647 nginx: NGINX: Denial of Service or Code
    Execution via specially crafted MP4 files


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-12
changelog:
  - Fixes CVE-2026-9256, CVE-2026-42055 and HTTP/2: Remote Denial of Service
    via compression bomb and Slowloris-style attack


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-1417
  - alt-name: Remove alt-names when interface marked as absent. RHEL-126481
  - hsr: Automatically disable IP on hsr port. RHEL-100774
  - hsr: add support for configuring "interlink" property. RHEL-100766
  - Support referring alternative-name as port/parent/next-hop-interface.
    RHEL-126508
  - Support referring interface name using its alternative name. RHEL-126510


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.59-1
changelog:
  - Upgrade to 2.2.59
  - route: add support for lock-mtu option. RHEL-151844
  - iptunnel: introduce support for ipip/sit/ip6ip6/ipip6 tunnels. RHEL-79801
  - nm: Fix error when modify port list of down interface. RHEL-52334


author: Jan Vaclav <jvaclav@redhat.com> - 2.2.60-1
changelog:
  - Upgrade to 2.2.60
  - Add support for configuring ipip tunnel in nmstate RHEL-79801
  - Fix error when modify port list of down interface RHEL-52334
  - Add support for mtu-lock route option RHEL-151844
  - ipv4: Add new parameter prefix-route-metric RHEL-147209


author: Rahul Rajesh <rajeshrah22@gmail.com> - 2.2.61-1
changelog:
  - Upgrade to 2.2.61
  - Support referring alt-name in `copy-mac-from` property. RHEL-145074
  - Fix validation of conflicting routes in kernel mode. RHEL-124835
  - Update GPG public key


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.61-2
changelog:
  - Fix copy-mac-from for down interfaces
  - Fix copy-mac-from failing when source interface is down. RHEL-145074
  - Fix OriginalName link match for stacked interfaces. RHEL-167955


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
changelog:
  - Update to version 22.22.2
  - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
  - disabled failing tests in nghttp2 due to newer version
  - patch for npm/braces CVE-2026-25547


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-2
changelog:
  - De-bundle c-ares, libuv
  - we waited for c-ares for about 4 months, so added conditional flag in
    case it falls behind in future again, same for libuv


author: Andrei Radchenko <aradchen@redhat.com> - 2023.10-11
changelog:
  - Add test case for symlinked dependencies bug fix
  - added test/symlinked scenario
  - verifies nodejs.req correctly generates requirements for symlinked deps
  - added mock 'external' packages to support this test


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Andrei Radchenko <aradchen@redhat.com> - 1:26.1.0-1
changelog:
  - Rebase to version 26.1.0 - use clang to build - new dependency - merve -
    disable LTO temporarily to fix linking issues with ICU/Abseil - unbundle
    c-ares - link libatomic manually(rhel clang ecosystem quirk) - remove
    --no-corepack option - add patch: include climits in memcopy.h Test plans
    update - merged 2 test plans into one test plan intended for RoG and OSCI
    gating - eeplaced nodejs24 variables with nodejs26 ones - removed
    installing packages step as it is handled by ci pipeline automatically


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Bob Relyea <rrelyea@redhat.com> - 3.124.0-1
changelog:
  - rebase to upstream NSS 3.124
  - backport ml-dsa support that is not upstream yet.
  - pick up in process patches upstream including eddsa


author: Bob Relyea <rrelyea@redhat.com> - 3.124.0-2
changelog:
  - rebase fixes
  - restore mlkem aliases
  - add mlkem key lengths to the mechanism info
  - fix crash if you try to encapsulate with an unimported
    public key
  - restore distrusted certs to certdata.txt even though we
    never reference them to make tests happy.


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Joseph Marrero <jmarrero@redhat.com> - 2.23.0-6
changelog:
  - Add RPM macros to configure %_passwd_path and %_group_path
  - Fixes user/group lookup for packages with non-root file ownership
  - See: https://github.com/rpm-software-management/rpm/pull/3672


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Jerry James <loganjerry@gmail.com> - 9-1
changelog:
  - Update OCaml native arches for OCaml 5.1
  - Remove the Python file and some macros (now in ocaml-rpm-macros)
  - Add %ocaml_pkg macro for common declarations


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-85838


author: Jindrich Novy <jnovy@redhat.com> - 1.3.0-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.3.0
  - Resolves: RHEL-212011


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30345]
  - Resolves: [RHEL-30345]
    ([ESXi][RHEL10]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-36292]
  - Resolves: RHEL-36292
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-3
changelog:
  - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732]
  - Resolves: RHEL-40732
    (Drop unneeded gdk-pixbuf-xlib dependency)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.1 [RHEL-45549]
  - Resolves: RHEL-45549
    ([ESXi][RHEL10] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63092]
  - Resolves: RHEL-63092
    ([ESXi][RHEL10] open-vm-tools version 12.5.0 has been released - please rebase)


author: Bo Yang <boyang@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99156]
  - Resolves: RHEL-99156
    ([ESXi][RHEL10] open-vm-tools version 13.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-2
changelog:
  - ovt-Handle-new-cloud-init-error-code-and-status.patch [RHEL-99781]
  - ovt-Address-CVE-2025-41244.patch [RHEL-117382]
  - Resolves: RHEL-99781
    (Cloud-init receives TERM signal from PID 1 in the middle of running user data [rhel-10])
  - Resolves: RHEL-117382
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.2])


author: Bo Yang <boyang@redhat.com> - 13.0.5-1
changelog:
  - Rebase to 13.0.5 [RHEL-118504]
  - Resolves: RHEL-118504
    ([ESXi][RHEL10] open-vm-tools version 13.0.5 has been released - please rebase)


author: Bo Yang <boyang@redhat.com> - 13.0.10-1
changelog:
  - Rebase to 13.0.10 [RHEL-144577]
  - Resolves: RHEL-144577
    ([ESXi][RHEL10] open-vm-tools version 13.0.10 has been released - please rebase)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 13.0.10-2
changelog:
  - Revert rebase to 13.1.0 due to GTK4 drag-and-drop regression [RHEL-240828]
  - Resolves: RHEL-240828
  - Reverts: RHEL-180878
  - Related: RHEL-240826


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 13.1.0-1
changelog:
  - Rebase to 13.1.0 [RHEL-180878]
  - Switch to GTK4 and drop bundled gtkmm3 stack
  - Resolves: RHEL-180878
    ([ESXi][RHEL10] open-vm-tools version 13.1.0 has been released - please rebase)


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Matthew Burket <mburket@redhat.com> - 1:1.4.3-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133978)
  - Add the ability to show rule details in output (RHEL-104651)


author: Matthew Burket <mburket@redhat.com> - 1:1.4.4-1
changelog:
  - Upgrade to the latest upstream release (RHEL-161763)
  - Fix Bash completion (RHEL-145121)
  - Add ability to list rules and variables in a profile by the "oscap info" command (RHEL-143569)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-21
changelog:
  - Implement obtaining Kerberos tickets on behalf of user on SSH authentication
    Resolves: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
changelog:
  - Remove recommendation of p11-kit
    Resolves: RHEL-139070
  - Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
    in sshd_config should count when defined multiple times
    Resolves: RHEL-150365
  - Fix mistracking of MaxStartups process exits in some situations
    Resolves: RHEL-121768
  - Fix GSSAPI authentication indicator issues found by AI
    Resolves: RHEL-154309
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155813


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
changelog:
  - Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
    Resolves: RHEL-88565
  - Fix duplicate audit log entry when destroying ed25519 private keys
    Resolves: RHEL-46782
  - Fix typo in GSSAPIProxyS4U2Services
    Related: RHEL-92932


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-25
changelog:
  - Fix static analysis issues
    Resolves: RHEL-163365
  - Ssh should refuse connection when mlkem kex is specified in FIPS
    Resolves: RHEL-155178
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164740
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166239
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166223
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166191
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166207


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-26
changelog:
  - Improve keytab detection when obtaining Kerberos tickets on behalf of user on SSH authentication
    Related: RHEL-92932
  - Add missing NULL check for server key generation in ML-KEM hybrids
    Resolves: RHEL-168106


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-27
changelog:
  - CVE-2026-55653: Fix double free in openssh DH-GEX client path during
    FIPS known-group validation that leads to client-side denial of service
    Resolves: RHEL-185776
  - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
    cleanup due to missing NULL terminator
    Resolves: RHEL-185831
  - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
    pre-binding
    Resolves: RHEL-185848
  - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
    in unintended parent directories when scp performs remote-to-remote copy
    via the local host
    Resolves: RHEL-193172
  - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
    Resolves: RHEL-193015


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-28
changelog:
  - Fix GSSAPI indicators check ignoring subsequent deny rules if
    allow rule matched first
    Resolves: RHEL-182151
  - Add default value for GSSAPIDelegateCredentials property in sshd_config manpage
    Resolves: RHEL-211135
  - Fix self-copy guard bypass in copy-data extension
    Resolves: RHEL-191388


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-29
changelog:
  - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded
    file location
    Resolves: RHEL-236323
  - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect
    handling of forwarding and tunneling options
    Resolves: RHEL-236275


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-30
changelog:
  - CVE-2026-73283: Complete the fix of security bypass due to incorrect
    handling of forwarding and tunneling options
    Resolves: RHEL-242759
  - CVE-2026-73281: Fix misinteraction between agent locking and
    the session-bind@openssh.com extension
    Resolves: RHEL-245421
  - CVE-2026-73282: Fix information disclosure and data corruption
    via use-after-free in ssh client
    Resolves: RHEL-245417


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-122599
    Resolves: RHEL-141987
    Resolves: RHEL-142009
    Resolves: RHEL-142022
    Resolves: RHEL-142026
    Resolves: RHEL-142030
    Resolves: RHEL-142034
    Resolves: RHEL-142038
    Resolves: RHEL-142042
    Resolves: RHEL-142046
    Resolves: RHEL-142050
    Resolves: RHEL-142054


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.7-1
changelog:
  - Rebase to OpenSSL 3.5.7
    Resolves: RHEL-179698
    Resolves: RHEL-179694
    Resolves: RHEL-179690
    Resolves: RHEL-179686
    Resolves: RHEL-179673
    Resolves: RHEL-179659
    Resolves: RHEL-179624
    Resolves: RHEL-179554
    Resolves: RHEL-179549
    Resolves: RHEL-179546
    Resolves: RHEL-179541
    Resolves: RHEL-179538
    Resolves: RHEL-179279
    Resolves: RHEL-179271


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.7-3
changelog:
  - In FIPS mode when neither FIPS provider nor FIPS provider configuration is
    present, OpenSSL silently falls back to the default provider.
    Resolves: RHEL-213740


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.8-1
changelog:
  - Rebase to OpenSSL 3.5.8
    Resolves: RHEL-179271
    Resolves: RHEL-179279
    Resolves: RHEL-179538
    Resolves: RHEL-179541
    Resolves: RHEL-179546
    Resolves: RHEL-179549
    Resolves: RHEL-179554
    Resolves: RHEL-179624
    Resolves: RHEL-179659
    Resolves: RHEL-179673
    Resolves: RHEL-179686
    Resolves: RHEL-179690
    Resolves: RHEL-179694
    Resolves: RHEL-179698
    Resolves: RHEL-242943


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Fix reversion of previous dependency updates post golang update
    Resolves: RHEL-79109


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify pre-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-76915


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-84025


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Update addresses CVE-2025-29786
    Resolves: RHEL-84153


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-84160


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-9
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85035


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90009


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0 Add systemd-journal group to Requires Bump go-
    tpm-keyfiles Resolves: RHEL-119363


author: Kseniia Nivnia <knivnia@redhat.com> - 0.144.0-2
changelog:
  - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3
  - Addresses: CVE-2026-25679, CVE-2026-33186, CVE-2026-34986,
    CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810


author: Kseniia Nivnia <knivnia@redhat.com> - 0.152.1-1
changelog:
  - Update to v0.152.1
  - Addresses CVE-2026-39821, CVE-2026-42154, CVE-2026-33811, CVE-2026-42151,
    CVE-2026-27145, CVE-2026-25681, CVE-2026-27136


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.5.3-2
changelog:
  - We run tests with specially crafted OpenSSL configuration, not the system one
    Resolves: RHEL-25983


author: Lukas Tyrychtr <ltyrycht@redhat.com> - 46.1-2
changelog:
  - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Backport announcing error-message relation announcement in non-web contexts from 49
    Resolves: RHEL-132453


author: Pavel Hrdina <phrdina@redhat.com> - 20260812-1
changelog:
  - Rebased to osinfo-db-20260812 (RHEL-238411)
  - The rebase also fixes the following bugs:
      RHEL-215502


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Chris Lumens <clumens@redhat.com> - 3.0.1-4
changelog:
  - Fix promoting instances of a cloned resource
  - Handle large timeouts correctly in crm_resource --wait
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-120932
  - Resolves: RHEL-86148
  - Resolves: RHEL-114895


author: Chris Lumens <clumens@redhat.com> - 3.0.2-1
changelog:
  - Rebase on upstream 3.0.2-rc2
  - Don't hang waiting on certain pending monitor actions
  - Resolves: RHEL-78393


author: Chris Lumens <clumens@redhat.com> - 3.0.3-1
changelog:
  - Rebase on upstream 3.0.3-rc1
  - Fix integer overflows in remote message decompression code (CVE-2026-10649)
  - Fix a bug preventing the ClusterMon resource from starting
  - Support UTF-8 characters in the cibsecret tool
  - Allow modifying the status section of the CIB without triggering refresh
  - Resolves: RHEL-181155
  - Resolves: RHEL-184531
  - Resolves: RHEL-178864
  - Resolves: RHEL-70283


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-8
changelog:
  - Make sure redhat-package-notes spec is skipped if _package_note_flags is
    undefined (rbhz#2184553)


author: Sudip Shil <sshil@redhat.com> - 6.0-7
changelog:
  - Convert to new fonts packaging guidelines and SPDX license
  - Update the fonts package
  - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jan Kuřík <jkurik@redhat.com> - 7.1.5-5
changelog:
  - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213661)
  - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213692)
  - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213717)
  - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213726)


author: Jan Kuřík <jkurik@redhat.com> - 7.1.5-6
changelog:
  - Backport remaining PCP security hardening fixes from private-pcp
  - pmieconf and pmlogmv command injection hardening (CWE-78)
  - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195)
  - timezone and zoneinfo string validation
  - pmdaroot peer credential verification (CWE-403)
  - pmproxy REST CERT_REQD enforcement and logger servlet authentication


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.02-513
changelog:
  - Fix symlink and hardlink path traversal in secure extract mode
    (CVE-2026-42496, CVE-2026-42497)
    Resolves: RHEL-181653


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.02-514
changelog:
  - Fix memory DoS via attacker-controlled tar entry size field
    (CVE-2026-9538)
    Resolves: RHEL-191919


author: Paul Howarth <paul@city-fan.org> - 0.018-1
changelog:
  - Update to 0.018
    - Fix version requirement for CPAN::Meta::Prereqs
    - Move issue tracker to GitHub


author: Paul Howarth <paul@city-fan.org> - 2.143-1
changelog:
  - Update to 2.143 (rhbz#2216187)
    - Fix regression with implicit minimum value and multiple requirements (GH#38)
  - Don't package perlcritic.rc


author: Paul Howarth <paul@city-fan.org> - 2.142-1
changelog:
  - Update to 2.142
    - confess() replaced with croak(): fewer stack traces
    - Broke the version range handling into the Range class
    - Note: this version now requires perl v5.10 rather than v5.6
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.114-1
changelog:
  - Update to 0.114
    - Data::OptList now requires perl v5.12.0
    - Tests no longer add "-T" to shebang, so do not invoke taint mode


author: Packit <hello@packit.dev> - 6.93-1
changelog:
  - Release: v6.93 (Sullivan Beck)
  - Checkpoint: v6.93 (Sullivan Beck)
  - Remove Travis (Sullivan Beck)
  - Initial checkin of next release cycle: 6.93 (Sullivan Beck)


author: Paul Howarth <paul@city-fan.org> - 1.006000-1
changelog:
  - Update to 1.006000
    - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var
      module
    - Refactored the Perl 5.37.2+ lexical exporter support


author: Paul Howarth <paul@city-fan.org> - 1.006001-1
changelog:
  - Update to 1.006001
    Documentation
    - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual
    Packaging
    - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl


author: Paul Howarth <paul@city-fan.org> - 1.006002-1
changelog:
  - Update to 1.006002
    Documentation
    - Link to Exporter::Almighty in pod
    - Update copyright dates
    Packaging
    - Set homepage in metadata to https://exportertiny.github.io


author: Michal Josef Špaček <mspacek@redhat.com> - 6.01-34
changelog:
  - Package tests
  - Patch for remove warning in test
  - Simplify build and install phases
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 2.205-1
changelog:
  - Update to 2.205
    - Add perl 5.38 to CI matrix
    - Add on workflow_dispatch
    - Add some OO examples


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 4.09-1
changelog:
  - Update to 4.09
    - Updated backportPP with JSON::PP 4.11
    - Fix a test to pass under perl with core bool support


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 2:0.42.34-1
changelog:
  - 0.4234 bump
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Michal Josef Špaček <mspacek@redhat.com> - 6.0.1-42
changelog:
  - Add patch to add tests for other USM scenarios
  - Add patch to rewrite from Digest::SHA1 to Digest::SHA
  - Add patch to rewrite usage of HMAC with same dependencies
  - Add patch to split test files for better readability
  - Improve patch for switch from Socket6 to Socket
  - Package tests
  - Rename patch to better name with source dist version


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Michal Josef Špaček <mspacek@redhat.com> - 2.014-9
changelog:
  - Fix running of tests in perl-Net-Server-tests subpackage
    Resolves: RHEL-65278
  - Sync OpenSSL Engine patch with upstream


author: Paul Howarth <paul@city-fan.org> - 0.104003-1
changelog:
  - Update to 0.104003 (rhbz#2208530)
    - Add Artistic 1.0 Perl license and make Perl license use it
    - Remove extra "59" from LGPL-2.1
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.104004-1
changelog:
  - Update to 0.104004 (rhbz#2209461)
    - Rename Perl Artistic License to avoid confusion in detecting license


author: Paul Howarth <paul@city-fan.org> - 0.991-1
changelog:
  - Update to 0.991
    - Make the requirement for perl v5.12.0 explicit; previously, it was only
      implicit because of prerequisites


author: Paul Howarth <paul@city-fan.org> - 0.929-1
changelog:
  - Update to 0.929 (rhbz#2157199)
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Use %license
  - Fix permissions verbosely
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 3:1.302196-1
changelog:
  - Update to 1.302196
    - Raise error on missing Hub ID, which should never happen (GH#882)
    - Fix handling of VSTRING and LVALUE refs in is_deeply() (GH#918)
    - Merge several documentation fixes (GH#910, GH#911, GH#912)


author: Paul Howarth <paul@city-fan.org> - 3:1.302197-1
changelog:
  - Update to 1.302197
    - Add ability to attach timestamps to trace objects via API or environment
      variable


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2255994)
    - Update docs to recommend YAML::PP
  - Package description updated as per upstream documentation


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 1:1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 7:6.0.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/releases/tag/v6.0.2
  - Related: RHEL-185733


author: Jindrich Novy <jnovy@redhat.com> - 7:6.1.0-2
changelog:
  - Rebuild for Go and security fixes
  - Resolves: RHEL-190079, RHEL-190852, RHEL-241124, RHEL-241361, RHEL-241463, RHEL-241829, RHEL-241930, RHEL-242162


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Marek Kasik <mkasik@redhat.com> - 24.02.0-9
changelog:
  - Revert previous commit as it is incomplete yet
  - and other fixes need to go in
  - Reverts: RHEL-145379


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-9
changelog:
  - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
    Resolves: RHEL-138726


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.8.5-10
changelog:
  - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
    Resolves: RHEL-176547


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 16.14-1
changelog:
  - Update to 16.14
  - Add BuildRequires: perl(FindBin) for Perl 5.40 compatibility
  - Resolves: RHEL-208694


author: Filip Janus <fjanus@redhat.com> - 16.14-2
changelog:
  - Enable PQC-compatible TLS group negotiation via ssl_ecdh_curve
  - Backport SSL_CTX_set1_groups_list() from PG18 (upstream commit 3d1ef3a15c3)
  - Backport SSLerrmessageExt() helper for improved error reporting
  - Update GUC description to document colon-separated group list support
  - Resolves: RHEL-119229


author: Filip Janus <fjanus@redhat.com> - 16.14-3
changelog:
  - Add SSL test coverage for colon-separated ssl_ecdh_curve group list
  - Backport test from upstream commit 3d1ef3a15c3 (adapted for PG16)
  - Resolves: RHEL-119229


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Brian C. Lane <bcl@redhat.com> - 3.52.4-1
changelog:
  - timezone: Remove the --isUtc, --nontp, and --ntpserver arguments (bcl)
    Related: RHEL-34009
  - packages: Remove the old camel case arguments on RHEL10 (bcl)
    Resolves: RHEL-34009
  - nvdimm: Remove support for the nvdimm command on RHEL10 (bcl)
    Related: RHEL-34009


author: Brian C. Lane <bcl@redhat.com> - 3.52.6-1
changelog:
  - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl)
    Related: RHEL-61426
  - workflow: Use python 3.12.7 for testing (bcl)
    Related: RHEL-61426
  - options: adjust to behavior change in upstream _parse_optional (awilliam)
    Resolves: RHEL-61426


author: Brian C. Lane <bcl@redhat.com> - 3.52.7-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61435


author: Brian C. Lane <bcl@redhat.com> - 3.52.8-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61435
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76502


author: Brian C. Lane <bcl@redhat.com> - 3.52.9-1
changelog:
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-80086
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-80086


author: Brian C. Lane <bcl@redhat.com> - 3.52.10-1
changelog:
  - pylint: Ignore files in .git (bcl)
    Related: RHEL-96217
  - Add support for RDP (jkonecny)
    Resolves: RHEL-96217


author: Brian C. Lane <bcl@redhat.com> - 3.52.11-1
changelog:
  - Add support for new bootc kickstart command (ppolawsk)
    Resolves: RHEL-132612
    Related: RHEL-58215


author: Brian C. Lane <bcl@redhat.com> - 3.52.12-1
changelog:
  - rhsm: Add Flatpak registry option for RHEL10 (bciconel)
    Resolves: RHEL-132652
    Related: RHEL-132663


author: Brian C. Lane <bcl@redhat.com> - 3.52.13-1
changelog:
  - Add --type option to %certificate section (rvykydal)
    Resolves: RHEL-181666
  - Update the %certificate section documentation (rvykydal)
    Related: RHEL-181666


author: Brian C. Lane <bcl@redhat.com> - 3.52.3-1
changelog:
  - btrfs: Remove support for the btrfs command on RHEL10 (bcl)
    Resolves: RHEL-34009
  - Deprecate modularity on RHEL 10 (marusak.matej)
    Resolves: RHEL-34829


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Charalampos Stratakis <cstratak@redhat.com> - 1.20.0-1
changelog:
  - Add %pyproject_patch_dependency macro for overriding dependency constraints
  - Overrides apply to both BuildRequires and runtime Requires (via METADATA patching)
  - Resolves: rhbz#2386906


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.20.1-1
changelog:
  - Move %pyproject_patch_dependency implementation to pyproject-srpm-macros
  - Make pyproject-rpm-macros depend on pyproject-srpm-macros
  - Resolves: rhbz#2463187


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.21.0-1
changelog:
  - Implement extras validation
  - %pyproject_buildrequires: validates if extras exist in upstream metadata, otherwise ValueError is raised on Fedora >=45 and RHEL >=11. It will emit a warning instead on older releases.
  - Both user-specified extras and metadata extras are normalized following PEP 685 conventions.


author: Miro Hrončok <mhroncok@redhat.com> - 1.22.0-1
changelog:
  - Add long option support for all public parametric macros
  - E.g. %pyproject_buildrequires --no-runtime is equivalent to %pyproject_buildrequires -R
  - %pyproject_save_files: Allow to use --auto instead of +auto
  - %pyproject_patch_dependency: Validate arguments early, in %prep


author: Miro Hrončok <mhroncok@redhat.com> - 1.22.2-1
changelog:
  - %pyproject_buildrequires: Fix "Requirement satisfied/not satisfied" messages to show overridden constraints from %pyproject_patch_dependency
  - %pyproject_buildrequires: Stop using deprecated argparse.FileType


author: Miro Hrončok <mhroncok@redhat.com> - 1.23.1-1
changelog:
  - getopt: Fix global macro clobbering with save/restore stack
  - %pyproject_extras_subpkg: Add long options support
  - %pyproject_extras_subpkg: Make -D/--dist-name mutually exclusive with -i/-f/-F
  - Set PIP_CONFIG_FILE=/dev/null by default when invoking pip to build the wheel


author: Miro Hrončok <mhroncok@redhat.com> - 3.12-11
changelog:
  - %python_extras_subpkg: Add -v option to specify the required version(-release)
  - This is useful when the extras are built from a different specfile (e.g. in EPEL for a RHEL base package)
  - Resolves: RHEL-117448


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-10
changelog:
  - Don't assume %_smp_mflags only ever contains -jX, use -j%_smp_build_ncpus directly
  - Fixes: rhbz#2179149


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143057
  Resolves: RHEL-143109
  Resolves: RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143057, RHEL-143109, RHEL-144854


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat
  Related: RHEL-167886, RHEL-168120


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-167886, RHEL-168120


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Vendula Poncova <vponcova@redhat.com> - 1.7-1
changelog:
  - CI: Use dnf instead of yum to install CentOS packages (vponcova)
  - Documentation: Improve the installation instruction (vponcova)
  - Remove untracked files from the git repository interactively (vponcova)
  - UnixFD: Document the support for Unix file descriptors (vponcova)
  - Documentation: Clean up examples in the documentation (vponcova)
  - Documentation: Simplify the README.md file (vponcova)
  - Documentation: Fix bullet point lists (vponcova)
  - Documentation: Simplify the hostname example (vponcova)
  - CI: Run tests for all supported Python version (vponcova)
  - UnixFD: Handle DBus signals with Unix file descriptors (vponcova)
  - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova)
  - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova)
  - UnixFD: Process results of client calls in the low-level library (vponcova)
  - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova)
  - CI: Always pull the latest container image (vponcova)
  - CI: Disable the unhashable-member warning (vponcova)
  - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova)
  - UnixFD: Move the unit tests to a new file (vponcova)
  - UnixFD: Manage the testing bus on set up and tear down (vponcova)
  - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova)
  - UnixFD: Create a new testing DBus interface (vponcova)
  - UnixFD: Fix the indentation in unit tests (vponcova)
  - Add unit tests for variants with variant types (vponcova)
  - Simplify the code for replacing values of the UnixFD type (vponcova)
  - Add classes for unpacking and unwrapping a variant (vponcova)
  - Don't use pylint from pip on Fedora Rawhide (vponcova)
  - UnixFD: Rename a parameter to server_arguments (vponcova)
  - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova)
  - Raise TimeoutError if a DBus call times out (vponcova)
  - Fix pylint tests in CentOS Stream 8 (vponcova)
  - Fix the ENV instruction in Dockerfiles (vponcova)
  - Fix pylint issues (vponcova)
  - run forked tests using subprocess, instead of multiprocessing (wdouglass)
  - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass)
  - Add test case for method call only returning fd (jlyda)
  - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda)
  - fix some lint discovered errors (wdouglass)
  - seperate unixfd functionality, to better support systems that don't have them (wdouglass)
  - Remove note in documentation about unsupported Unix file descriptors (wdouglass)
  - Add a test for UnixFD transfer (wdouglass)
  - Allow UnixFDs to be replaced and passed into Gio (wdouglass)
  - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo)
  - Extend the .coveragerc file (vponcova)
  - Disable builds for Fedora ELN on commits (vponcova)
  - Test Debian with Travis (vponcova)
  - Test Ubuntu with Travis (vponcova)
  - Test CentOS Stream 9 with Travis (vponcova)
  - Use CentOS Stream 8 for testing (vponcova)
  - add remove dbus object function on bus and update tests (matthewcaswell)
  - properly measure coverage across multiprocess test cases (wdouglass)
  - Move handle typing tests into a new class (and a new file) (wdouglass)
  - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass)
  - Add functions for generating/consuming fdlists with variants (wdouglass)
  - Provide a language argument for the code blocks (seahawk1986)
  - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass)
  - Allow to run tests in a container (vponcova)
  - Add C0209 to the ignore list for pylint (tjoslin)
  - Use the latest distro in Travis CI (vponcova)
  - Always update the container (vponcova)
  - Document limitations of the DBus specification generator (vponcova)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Evan Goode <egoode@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 (RHEL-38831)
  - Added pre-transaction plugin
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
    (RHEL-35577)


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 6.2.1.11-3.git4b3e853
changelog:
  - Fix IQN name validation (CVE-2026-44943)
  - Fix iscsiuio control-socket credential verification (CVE-2026-44944)


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: RHEL-113652
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: RHEL-113656


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Martin Kolman <mkolman@redhat.com> - 0.51-1
changelog:
  - SPDX compatible License: line (mkolman)
  - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com)
  - Improve formatting and data in setup.py (vslavik)


author: John Eckersberg <jeckersb@redhat.com> - 0.10.1-1
changelog:
  - New upstream release 0.10.1 (rhbz#2256342)
  - Remove patch for Python 3.13 compatibility (merged upstream in 0.10.0)
  - Add new depencency on furo
  - Include missing THANKS file (https://github.com/netaddr/netaddr/pull/345)


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Simon Pichugin <spichugi@redhat.com> - 0.6.3-1
changelog:
  - Update to 0.6.3
  - Added nesting depth limit to ASN.1 decoder (CVE-2026-30922)
  - Resolves: RHEL-170609


author: Simon Pichugin <spichugi@redhat.com> - 0.6.4-1
changelog:
  - Update to 0.6.4
  - Fixed quadratic complexity in OID/RELATIVE-OID decoders (CVE-2026-59885)
  - Limited BER/CER/DER long-form tag IDs to 20 octets (CVE-2026-59884)
  - Fixed excessive resource use in Real.__float__() (CVE-2026-59886)
  - Resolves: RHEL-211094


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <mhroncok@redhat.com> - 14-3
changelog:
  - Avoid needless pkg_resources import in pythonbundles.py
  - Ignore environment markers in pythonbundles.py


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Jiri Konecny <jkonecny@redhat.com> - 1.9.0-5
changelog:
  - Migrate to SPDX license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#Detailed_Description


author: Petr Písař <ppisar@redhat.com> - 0.7.33-3
changelog:
  - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
    repository (CVE-2026-9150) (RHEL-178263)


author: Petr Písař <ppisar@redhat.com> - 0.7.33-4
changelog:
  - Cope with integer overflow in data size arithmetics in repo_add_solv()
    (CVE-2026-9149) (RHEL-178267)


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-168121, RHEL-167887


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-168121, RHEL-167887


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-176147


author: Python Maint <python-maint@redhat.com> - 1.1.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haïkel Guémar <hguemar@fedoraproject.org>
        Iryna Shcherbina <ishcherb@redhat.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumír Balhar <lbalhar@redhat.com>
        Michal Schorm <mschorm@redhat.com>
        Miro Hrončok <mhroncok@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.3.4-2
changelog:
  - Fix issues identified via Coverity static analysis
  - Fix test_validate_transcendentals skip to match SVML dispatch
  - Fix signed overflow issue in npy_gcd for INT_MIN on s390x
  - Enable CET hardware protections
  - Fixes: RHEL-137130, RHEL-161528, RHEL-160066, RHEL-238378


author: Lukáš Zachar <lzachar@redhat.com> - 25.2-5
changelog:
  - Fix gating plan
  - removed unnecessary older VERSION= tests
  - removed bootstrap test
  - fix pip_install_upgrade to run pip-3.14
  - fix bash completion + remove unused metadata file


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-29
changelog:
  - Initial package
  Fedora contributions by:
      Dennis Gilmore <dennis@ausil.us>
      Bill Nottingham <notting@fedoraproject.org>
      Charalampos Stratakis <cstratak@redhat.com>
      Christian Heimes <cheimes@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jesse Keating <jkeating@fedoraproject.org>
      Miro Hrončok <miro@hroncok.cz>
      Orion Poplawski <orion@cora.nwra.com>
      Patrik Kopkan <pkopkan@redhat.com>
      Rob Crittenden <rcritten@redhat.com>
      Robert Kuska <rkuska@redhat.com>
      Slavek Kabrda <bkabrda@redhat.com>
      Stephen Gallagher <sgallagh@redhat.com>
      Thomas Spura <tomspur@fedoraproject.org>
      Tom Callaway <spot@fedoraproject.org>
      Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11^20251221git9d7c400-1
changelog:
  - Update to the latest and last upstream commit
  - The project won't have any new releases
  - Use modern pyproject macros
  Related: RHEL-120807


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37
  - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.6.3-2
changelog:
  - Security fix for CVE-2026-44431 and CVE-2026-44432
  - Resolves: RHEL-184903
  - Resolves: RHEL-185128


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-14
changelog:
  - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
  - Resolves: RHEL-153058
    (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
  - Resolves: RHEL-144004
    ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-15
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
  - Resolves: RHEL-155601
    (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-16
changelog:
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
  - Resolves: RHEL-158224
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-17
changelog:
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-114231]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-114231]
  - Resolves: RHEL-114231
    (Add stats-intervals support to --blockdev)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-18
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-158212]
  - kvm-hw-tpm-Factor-tpm_ppi_enabled-out.patch [RHEL-112608]
  - kvm-hw-tpm-Add-TPMIfClass-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Remove-CRBState-ppi_enabled-field.patch [RHEL-112608]
  - kvm-hw-tpm-Propagate-ppi_enabled-to-tpm_tis_reset-and-re.patch [RHEL-112608]
  - kvm-hw-tpm-Simplify-tpm_ppi_enabled.patch [RHEL-112608]
  - kvm-docs-specs-tpm-document-PPI-support-on-ARM64-virt.patch [RHEL-112608]
  - kvm-hw-acpi-tpm-parameterize-PPI-base-address-in-tpm_bui.patch [RHEL-112608]
  - kvm-hw-tpm-add-PPI-support-to-tpm-tis-device-for-ARM64-v.patch [RHEL-112608]
  - Resolves: RHEL-158212
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.3])
  - Resolves: RHEL-112608
    ([ARM64] Windows 11 VM should install without TPM Bypass)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-19
changelog:
  - kvm-vmstate-Introduce-VMSTATE_VARRAY_INT32_ALLOC.patch [RHEL-174858]
  - kvm-target-arm-Move-compare_u64-to-helper.c.patch [RHEL-174858]
  - kvm-target-arm-Convert-init_cpreg_list-to-g_hash_table_f.patch [RHEL-174858]
  - kvm-target-arm-machine-Use-VMSTATE_VARRAY_INT32_ALLOC-fo.patch [RHEL-174858]
  - kvm-target-arm-kvm-Export-kvm_print_register_name.patch [RHEL-174858]
  - kvm-target-arm-kvm-Tweak-print_register_name-for-arm64-s.patch [RHEL-174858]
  - kvm-target-arm-machine-Trace-cpreg-names-which-do-not-ma.patch [RHEL-174858]
  - kvm-target-arm-machine-Trace-all-register-mismatches.patch [RHEL-174858]
  - kvm-target-arm-machine-Fix-detection-of-unknown-incoming.patch [RHEL-174858]
  - kvm-target-arm-cpu-Introduce-the-infrastructure-for-cpre.patch [RHEL-174858]
  - kvm-target-arm-machine-Handle-ToleranceNotOnBothEnds-mig.patch [RHEL-174858]
  - kvm-target-arm-machine-Handle-ToleranceOnlySrcTestValue-.patch [RHEL-174858]
  - kvm-target-arm-cpu64-Mitigate-migration-failures-due-to-.patch [RHEL-174858]
  - kvm-target-arm-cpu64-Define-cpreg-migration-tolerance-fo.patch [RHEL-174858]
  - kvm-target-arm-helper-Define-cpreg-migration-tolerance-f.patch [RHEL-174858]
  - kvm-Revert-target-arm-Reinstate-bogus-AArch32-DBGDTRTX-r.patch [RHEL-174858]
  - kvm-hw-pci-host-gpex-acpi-Fix-_DSM-function-0-support-re.patch [RHEL-138494]
  - kvm-vfio-scsi-ui-Error-check-qio_channel_socket_connect_.patch [RHEL-138494]
  - kvm-vfio-igd-Enable-quirks-when-IGD-is-not-the-primary-d.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-amd-xgbe-device.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-calxeda-xgmac-device.patch [RHEL-138494]
  - kvm-hw-arm-virt-Include-system-system.h.patch [RHEL-138494]
  - kvm-vfio-Remove-vfio-platform.patch [RHEL-138494]
  - kvm-vfio-Move-vfio-region.h-under-hw-vfio.patch [RHEL-138494]
  - kvm-vfio-container-set-error-on-cpr-failure.patch [RHEL-138494]
  - kvm-vfio-Report-an-error-when-the-dma_max_mappings-limit.patch [RHEL-138494]
  - kvm-hw-vfio-user-add-x-pci-class-code.patch [RHEL-138494]
  - kvm-vfio-Introduce-helper-vfio_pci_from_vfio_device.patch [RHEL-138494]
  - kvm-vfio-vfio-container-base.h-update-VFIOContainerBase-.patch [RHEL-138494]
  - kvm-vfio-vfio-container.h-update-VFIOContainer-declarati.patch [RHEL-138494]
  - kvm-hw-vfio-cpr-legacy.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-hw-vfio-container.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-spapr.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-vfio-container.h-rename-VFIOContainer-bcontaine.patch [RHEL-138494]
  - kvm-vfio-user-container.h-update-VFIOUserContainer-decla.patch [RHEL-138494]
  - kvm-vfio-container.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-container.h-rename-VFIOUserContainer-bcont.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-update-VFIOUserPCIDevice-declaration.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-VFIOUserPCIDevice-device-fiel.patch [RHEL-138494]
  - kvm-vfio-pci.h-update-VFIOPCIDevice-declaration.patch [RHEL-138494]
  - kvm-vfio-pci.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-pci-quirks.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-cpr.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-igd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-use-QOM-casts-where-appropriate2.patch [RHEL-138494]
  - kvm-vfio-pci.h-rename-VFIOPCIDevice-pdev-field-to-parent.patch [RHEL-138494]
  - kvm-treewide-handle-result-of-qio_channel_set_blocking.patch [RHEL-138494]
  - kvm-vfio-pci-Do-not-unparent-in-instance_finalize.patch [RHEL-138494]
  - kvm-vfio-Do-not-unparent-in-instance_finalize.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container.h-rename-VFIOContaine.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container-base.h-rename-VFIOCon.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container.h-rename-file-to-vfio.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-container-base.h-rename-file-to.patch [RHEL-138494]
  - kvm-hw-vfio-container.c-rename-file-to-container-legacy..patch [RHEL-138494]
  - kvm-hw-vfio-container-base.c-rename-file-to-container.c.patch [RHEL-138494]
  - kvm-vfio-iommufd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-cpr-iommufd.c-use-QOM-casts-where-appropriate.patch [RHEL-138494]
  - kvm-vfio-vfio-iommufd.h-rename-VFIOContainer-bcontainer-.patch [RHEL-138494]
  - kvm-vfio-spapr.c-use-QOM-casts-where-appropriate2.patch [RHEL-138494]
  - kvm-vfio-spapr.c-rename-VFIOContainer-bcontainer-field-t.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_instance_init-to-vfio_pci_ini.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_instance_finalize-to-vfio_pci.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_class_init-to-vfio_pc.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_info-to-vfio_pci_info.patch [RHEL-138494]
  - kvm-s390x-s390-pci-vfio.c-use-QOM-casts-where-appropriat.patch [RHEL-138494]
  - kvm-hw-vfio-types.h-rename-TYPE_VFIO_PCI_BASE-to-TYPE_VF.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_base_dev_class_init-to-vf.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_base_dev_info-to-vfio_pci.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_properties-to-vfio_pc.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_dev_nohotplug_properties-.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_nohotplug_dev_class_init-.patch [RHEL-138494]
  - kvm-vfio-pci.c-rename-vfio_pci_nohotplug_dev_info-to-vfi.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_class_init-.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_properties-.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_instance_init-to-vf.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_instance_finalize-t.patch [RHEL-138494]
  - kvm-vfio-user-pci.c-rename-vfio_user_pci_dev_info-to-vfi.patch [RHEL-138494]
  - kvm-include-hw-vfio-vfio-device.h-fix-include-header-gua.patch [RHEL-138494]
  - kvm-vfio-Remove-workaround-for-kernel-DMA-unmap-overflow.patch [RHEL-138494]
  - kvm-system-iommufd-Use-uint64_t-type-for-IOVA-mapping-si.patch [RHEL-138494]
  - kvm-hw-vfio-Reorder-vfio_container_query_dirty_bitmap-tr.patch [RHEL-138494]
  - kvm-hw-vfio-Avoid-ram_addr_t-in-vfio_container_query_dir.patch [RHEL-138494]
  - kvm-hw-vfio-Use-uint64_t-for-IOVA-mapping-size-in-vfio_c.patch [RHEL-138494]
  - kvm-migration-push-Error-errp-into-vmstate_subsection_lo.patch [RHEL-138494]
  - kvm-migration-push-Error-errp-into-vmstate_load_state.patch [RHEL-138494]
  - kvm-migration-Remove-error-variant-of-vmstate_save_state.patch [RHEL-138494]
  - kvm-migration-multi-mode-notifier.patch [RHEL-138494]
  - kvm-migration-add-cpr_walk_fd.patch [RHEL-138494]
  - kvm-oslib-qemu_clear_cloexec.patch [RHEL-138494]
  - kvm-migration-cpr-exec-command-parameter.patch [RHEL-138494]
  - kvm-migration-cpr-exec-save-and-load.patch [RHEL-138494]
  - kvm-migration-cpr-exec-mode.patch [RHEL-138494]
  - kvm-migration-cpr-exec-docs.patch [RHEL-138494]
  - kvm-vfio-cpr-exec-mode.patch [RHEL-138494]
  - kvm-hw-vfio-listener-Include-missing-exec-target_page.h-.patch [RHEL-138494]
  - kvm-hw-Remove-unnecessary-system-ram_addr.h-header.patch [RHEL-138494]
  - kvm-vfio-container-Remap-only-populated-parts-in-a-secti.patch [RHEL-138494]
  - kvm-vfio-cpr-legacy-drop-an-erroneous-assert.patch [RHEL-138494]
  - kvm-vfio-iommufd-Set-cpr.ioas_id-on-source-side-for-CPR-.patch [RHEL-138494]
  - kvm-vfio-iommufd-Restore-vbasedev-s-reference-to-hwpt-af.patch [RHEL-138494]
  - kvm-vfio-container-Support-unmap-all-in-one-ioctl.patch [RHEL-138494]
  - kvm-vfio-iommufd-Support-unmap-all-in-one-ioctl.patch [RHEL-138494]
  - kvm-vfio-listener-Add-an-assertion-for-unmap_all.patch [RHEL-138494]
  - kvm-vfio-Clean-up-includes.patch [RHEL-138494]
  - kvm-migration-set-correct-list-pointer-when-removing-not.patch [RHEL-138494]
  - kvm-vfio-user-simplify-vfio_user_process.patch [RHEL-138494]
  - kvm-vfio-user-clarify-partial-message-handling.patch [RHEL-138494]
  - kvm-vfio-user-refactor-out-header-handling.patch [RHEL-138494]
  - kvm-vfio-user-simplify-vfio_user_recv_one.patch [RHEL-138494]
  - kvm-vfio-user-recycle-msg-on-failure.patch [RHEL-138494]
  - kvm-include-hw-hyperv-Remove-unused-struct-mshv_vp_regis.patch [RHEL-138494]
  - kvm-linux-headers-Update-to-Linux-v6.18-rc3.patch [RHEL-138494]
  - kvm-linux-headers-Update-to-Linux-v6.19-rc1.patch [RHEL-138494]
  - kvm-hw-vfio-Add-helper-to-retrieve-device-feature.patch [RHEL-138494]
  - kvm-hw-vfio-region-Create-dmabuf-for-PCI-BAR-per-region.patch [RHEL-138494]
  - Resolves: RHEL-174858
    ([rhel10] Backport qemu cross-kernel migration mitigation series)
  - Resolves: RHEL-138494
    (NVIDIA:Grace-Hopper:Backport vfio: Add DMABUF support for PCI BAR regions - RHEL 10.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-20
changelog:
  - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-178767]
  - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-178767]
  - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-155807]
  - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-155807]
  - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-155807]
  - kvm-hw-tpm-tpm_tis_sysbus-defer-resource-allocation-to-r.patch [RHEL-178846]
  - kvm-vfio-container-Restrict-dma_map_file-to-shared-RAM-o.patch [RHEL-180750]
  - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-153123]
  - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-153123]
  - Resolves: RHEL-178767
    (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests)
  - Resolves: RHEL-155807
    (live migration failed the VM just register key only [rhel-10.3])
  - Resolves: RHEL-178846
    ([aarch64] qemu-kvm crashes on --device tpm-tis-device,?)
  - Resolves: RHEL-180750
    (Backport in QEMU : vfio/container: Restrict dma_map_file() to shared RAM or RAM devices)
  - Resolves: RHEL-153123
    (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-21
changelog:
  - kvm-hw-vfio-sort-and-validate-sparse-mmap-regions-by-off.patch [RHEL-150900]
  - kvm-vfio-Add-Error-parameter-to-vfio_region_setup.patch [RHEL-150900]
  - kvm-hw-vfio-align-mmap-to-power-of-2-of-region-size-for-.patch [RHEL-150900]
  - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184530]
  - Resolves: RHEL-150900
    (NVIDIA:Grace:Backport hw/vfio: Enable hugepfnmap for non-power-of-2 device memory regions - RHEL 10.3)
  - Resolves: RHEL-184530
    (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.3])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-22
changelog:
  - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-121686]
  - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-121686]
  - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-121686]
  - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-121686]
  - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-121686]
  - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-121686]
  - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-121686]
  - kvm-block-graph-lock-fix-missed-wakeup-in-bdrv_graph_co_.patch [RHEL-186384]
  - kvm-block-curl-fix-curl-internal-handles-handling.patch [RHEL-186384]
  - kvm-block-curl.c-Use-explicit-long-constants-in-curl_eas.patch [RHEL-186384]
  - kvm-block-curl.c-Fix-CURLOPT_VERBOSE-parameter-type.patch [RHEL-186384]
  - kvm-block-curl-fix-concurrent-completion-handling.patch [RHEL-186384]
  - kvm-block-curl-free-s-password-in-cleanup-paths.patch [RHEL-186384]
  - kvm-nvme-Kick-and-check-completions-in-BDS-context.patch [RHEL-186384]
  - kvm-nvme-Note-in-which-AioContext-some-functions-run.patch [RHEL-186384]
  - kvm-block-remove-detached-header-option-from-opts-after-.patch [RHEL-186384]
  - kvm-block-fix-luks-amend-when-run-in-coroutine.patch [RHEL-186384]
  - kvm-qed-Don-t-try-to-flush-during-incoming-migration.patch [RHEL-186384]
  - kvm-block-vmdk-fix-OOB-read-in-vmdk_read_extent.patch [RHEL-186384]
  - kvm-block-throttle-groups-fix-deadlock-with-iolimits-and.patch [RHEL-186384]
  - kvm-throttle-group-Fix-race-condition-in-throttle_group_.patch [RHEL-186384]
  - kvm-qemu-img-Fix-amend-option-parse-error-handling.patch [RHEL-186384]
  - kvm-qemu-img-rebase-don-t-exceed-IO_BUF_SIZE-in-one-oper.patch [RHEL-186384]
  - kvm-python-backport-drop-Python3.6-workarounds.patch [RHEL-186384]
  - kvm-python-backport-Remove-deprecated-get_event_loop-cal.patch [RHEL-186384]
  - kvm-python-backport-avoid-creating-additional-event-loop.patch [RHEL-186384]
  - kvm-iotests-147-ensure-temporary-sockets-are-closed-befo.patch [RHEL-186384]
  - kvm-iotests-151-ensure-subprocesses-are-cleaned-up.patch [RHEL-186384]
  - kvm-tests-qemu-iotest-fix-iotest-024-with-qed-images.patch [RHEL-186384]
  - kvm-tests-qemu-iotests-Fix-check-for-existing-file-in-_r.patch [RHEL-186384]
  - kvm-async-access-bottom-half-flags-with-qatomic_read.patch [RHEL-186384]
  - kvm-block-linux-aio-bound-ioq_submit-recursion-depth.patch [RHEL-186384]
  - kvm-block-io-fallback-to-bounce-buffer-if-BLKZEROOUT-is-.patch [RHEL-186384]
  - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-186384]
  - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-186384]
  - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-186384]
  - kvm-virtio-Fix-crash-when-sriov-pf-is-set-for-non-PCI-Ex.patch [RHEL-186384]
  - kvm-virtio-scsi-pass-the-same-cdb_size-to-virtio_scsi_po.patch [RHEL-186384]
  - kvm-hw-scsi-avoid-deadlock-upon-TMF-request-cancelling-w.patch [RHEL-186384]
  - kvm-virtio-blk-fix-zone-report-buffer-out-of-memory-CVE-.patch [RHEL-186384]
  - kvm-ide-Fix-potential-assertion-failure-on-VM-stop-for-P.patch [RHEL-186384]
  - kvm-block-Create-DEFAULT_BLOCK_CONF-macro.patch [RHEL-186384]
  - kvm-block-Add-more-defaults-to-DEFAULT_BLOCK_CONF.patch [RHEL-186384]
  - kvm-block-mirror-check-range-when-setting-zero-bitmap-fo.patch [RHEL-186384]
  - kvm-iotests-test-active-mirror-with-unaligned-small-writ.patch [RHEL-186384]
  - kvm-block-mirror-fix-assertion-failure-upon-duplicate-co.patch [RHEL-186384]
  - kvm-commit-Drain-nodes-across-all-of-bdrv_commit.patch [RHEL-186384]
  - kvm-qemu-io-Add-aio_discard-command.patch [RHEL-186384]
  - kvm-qcow2-Fix-corruption-on-discard-during-write-with-CO.patch [RHEL-186384]
  - kvm-iotests-046-Test-that-discard-write_zeroes-wait-for-.patch [RHEL-186384]
  - kvm-qcow2-Fix-data-loss-on-zero-write-with-detect-zeroes.patch [RHEL-186384]
  - kvm-block-Fix-crash-after-setting-latency-historygram-wi.patch [RHEL-186384]
  - Resolves: RHEL-121686
    (qemu-kvm hung during drain after double pause)
  - Resolves: RHEL-186384
    (virt-storage: Backport stable branch fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-23
changelog:
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vio.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vde.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-common-Factor-out-common-helper-function.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-add-memory-regions-as-property-for-an-SM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Extract-common-definitions-to-smmuv3-c.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmu-common-Make-iommu-ops-part-of-SMMUState.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-smmuv3-accel-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Initialize-shared-system-address.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Move-pci_init_bus_master-after-adding-dev.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Export-pci_device_get_iommu_bus_devfn-and-ret.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Add-optional-supports_address_space-callb.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-bridge-pci_expander_bridge-Move-TYPE_PXB_PCIE.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Restrict-accelerated-SMMUv3-to-v.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Implement-get_viommu_cap-callback.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Introduce-pci_device_get_viommu_flags.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Introduce-pci_device_get_host_iommu_quirks.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Define-STE-CD-fields-via-regist.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Add-NSCFG-bit-definition-for-CD.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-common-Add-STE-CD-set-helpers-for-repe.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-set-unset_iommu_device-callb.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-propagate-smmuv3_cmdq_consume-errors-t.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-nested-vSTE-install-uninstal.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Install-SMMUv3-GBPA-based-hwpt.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Introduce-a-callback-to-retrieve-the-MSI-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-get_msi_direct_gpa-cal.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Set-msi-gpa-property.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-support-to-issue-invalidatio.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Initialize-ID-registers-early-during-r.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Get-host-SMMUv3-hw-info-and-vali.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-host-gpex-Allow-to-generate-preserve-boot-con.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Set-PCI-preserve_config-for-accel-SMMUv3.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-tests-qtest-bios-tables-test-Prepare-for-IORT-reviso.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-acpi-build-Add-IORT-RMR-regions-to-handl.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-tests-qtest-bios-tables-test-Update-IORT-blobs-after.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Block-migration-when-accel-is-enabled.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-accel-property-for-SMMUv3-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-a-property-to-specify-RIL-su.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-support-for-ATS.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-property-to-specify-OAS-bits.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Retrieve-PASID-width-from-iommufd_b.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Add-get_pasid_info-callback.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Add-helper-to-insert-PCIe-extended-capability.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-Factor-out-common-PASID-capability-initializa.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-vfio-pci-Synthesize-PASID-capability-for-vfio-pci.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Make-SubstreamID-support-configu.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-memory-Factor-address_space_is_io-out.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-target-i386-arch_memory_mapping-Use-address_space_me.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-s390x-sclp-Use-address_space_memory_is_io-in-sclp.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-physmem-Remove-cpu_physical_memory_is_io.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_vev.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-viommu-free-helper.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Allocate-vEVENTQ-for-accelerated.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Introduce-a-helper-function-for-event-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Read-and-propagate-host-vIOMMU-e.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Correct-SMMUEN-field-name-in-CR0.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Fix-CFGI_CD-handling-when-stage-1-is-u.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Check-ATS-compatibility-between-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ats-property-type-to-OnOf.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ril-property-type-to-OnOf.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qdev-Add-a-SsidSizeMode-property-type.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-ssidsize-property-type-to.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qdev-Add-an-OasMode-property-type.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Change-oas-property-type-to-OasM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qemu-options.hx-Document-arm-smmuv3-device-s-accel-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Have-smmuv3_accel_init-take-an-Error-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Update-ATC-invalidation-check.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Improve-accel-SMMUv3-usage-documentati.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Add-helper-for-resolving-auto-pa.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ats.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ril.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-ssidsiz.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Implement-auto-value-for-oas.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Set-default-ats-ril-ssidsize-oas-to-au.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-qemu-options.hx-Support-auto-for-accel-SMMUv3-proper.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-pci-pci-Enforce-pci_setup_iommu_per_bus-is-called.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-vfio-iommufd-Force-creating-nesting-parent-HWPT.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-vfio-iommufd-Control-dirty-tracking-for-nesting-p.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Update-iommufd_backend_get_device_i.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-iommufd-Rename-all-the-idev-and-idevc-variables-to-h.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Update-iommufd_backend_alloc_viommu.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_alloc_hw_.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-backends-iommufd-Introduce-iommufd_backend_viommu_mm.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-system-iommufd-Remove-unused-viommu-pointer-from-IOM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-CMDQV-ops-interface.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Avoid-including-CONFIG_DEVICES-in-hw-h.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Add-Tegra241-CMDQV-ops-backend.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Wire-CMDQV-ops-into-accel-lifecy.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Use-stored-SMMUv3-device-list-for-IORT-b.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Probe-host-Tegra241-CMDQV-supp.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Implement-CMDQV-init.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-Link-SMMUv3-CMDQV-resources-to-platform-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Implement-CMDQV-vIOMMU-alloc-f.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-mmap-host-VINTF-Page0-for-CMDQ.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-CMDQ-V-Config-region.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-VCMDQ-register-reads.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Emulate-VCMDQ-register-writes.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Allocate-HW-VCMDQs-once-config.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Route-allocated-VCMDQ-Page0-ac.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-memory-Allow-RAM-device-regions-to-skip-IOMMU-mappin.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Use-mmap-d-host-VINTF-page0-fo.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-common-helper-for-veve.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Read-and-propagate-Tegra241-CM.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Initialize-register-state-on-r.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Limit-queue-size-based-on-back.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-per-device-identifier-property.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Introduce-helper-to-query-CMDQV-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-virt-acpi-Advertise-Tegra241-CMDQV-nodes-in-D.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-accel-Enforce-viommu-association-when-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-tegra241-cmdqv-Document-the-CMDQV-design-and-.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-hw-arm-smmuv3-Add-cmdqv-property-for-SMMUv3-device.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - kvm-rh-aarch64-rh-devices.mak-Add-CONFIG_TEGRA241_CMDQV.patch [RHEL-142465 RHEL-160190 RHEL-163596 RHEL-73794 RHEL-73796 RHEL-73798]
  - Resolves: RHEL-142465
    ([RHEL-10.1][ARM]: Two smmuv3 devices can be attached to the same bus)
  - Resolves: RHEL-160190
    (NVIDIA:Backport hw/arm/smmuv3-accel: Support AUTO properties - RHEL 10.3)
  - Resolves: RHEL-163596
    (NVIDIA:Backport hw/arm/smmuv3-accel: Resolve AUTO properties - RHEL 10.3)
  - Resolves: RHEL-73794
    (NVIDIA:Grace-Hopper:Backport HW accelerated nesting support for arm SMMUv3 - RHEL 10.1)
  - Resolves: RHEL-73796
    (NVIDIA:Grace-Hopper:Backport vEVENTQ support for smmuv3 - RHEL 10.1)
  - Resolves: RHEL-73798
    (NVIDIA:Grace-Hopper:Backport CMDQV support - RHEL 10.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-24
changelog:
  - kvm-net-tap-linux.c-avoid-abort-when-setting-invalid-fd.patch [RHEL-113894]
  - kvm-crypto-only-verify-CA-certs-in-chain-of-trust.patch [RHEL-111934]
  - kvm-crypto-remove-extraneous-pointer-usage-in-gnutls-cer.patch [RHEL-111934]
  - kvm-crypto-fix-error-reporting-in-cert-chain-checks.patch [RHEL-111934]
  - kvm-crypto-allow-client-server-cert-chains.patch [RHEL-111934]
  - kvm-crypto-stop-requiring-key-encipherment-usage-in-x509.patch [RHEL-111934]
  - kvm-crypto-switch-to-newer-gnutls-API-for-distinguished-.patch [RHEL-111934]
  - kvm-crypto-remove-redundant-parameter-checking-CA-certs.patch [RHEL-111934]
  - kvm-crypto-add-missing-free-of-certs-array.patch [RHEL-111934]
  - kvm-crypto-replace-stat-with-access-for-credential-check.patch [RHEL-111934]
  - kvm-crypto-remove-redundant-access-checks-before-loading.patch [RHEL-111934]
  - kvm-crypto-move-check-for-TLS-creds-dir-property.patch [RHEL-111934]
  - kvm-crypto-use-g_autofree-when-loading-x509-credentials.patch [RHEL-111934]
  - kvm-crypto-remove-needless-indirection-via-parent_obj-fi.patch [RHEL-111934]
  - kvm-crypto-move-release-of-DH-parameters-into-TLS-creds-.patch [RHEL-111934]
  - kvm-crypto-shorten-the-endpoint-server-check-in-TLS-cred.patch [RHEL-111934]
  - kvm-crypto-remove-duplication-loading-x509-CA-cert.patch [RHEL-111934]
  - kvm-crypto-reduce-duplication-in-handling-TLS-priority-s.patch [RHEL-111934]
  - kvm-crypto-introduce-method-for-reloading-TLS-creds.patch [RHEL-111934]
  - kvm-crypto-introduce-a-wrapper-around-gnutls-credentials.patch [RHEL-111934]
  - kvm-crypto-fix-lifecycle-handling-of-gnutls-credentials-.patch [RHEL-111934]
  - kvm-crypto-make-TLS-credentials-structs-private.patch [RHEL-111934]
  - kvm-crypto-deprecate-use-of-external-dh-params.pem-file.patch [RHEL-111934]
  - kvm-crypto-avoid-loading-the-CA-certs-twice.patch [RHEL-111934]
  - kvm-crypto-avoid-loading-the-identity-certs-twice.patch [RHEL-111934]
  - kvm-crypto-expand-logic-to-cope-with-multiple-certificat.patch [RHEL-111934]
  - kvm-crypto-support-upto-5-parallel-certificate-identitie.patch [RHEL-111934]
  - kvm-docs-creation-of-x509-certs-compliant-with-post-quan.patch [RHEL-111934]
  - kvm-iommufd-Introduce-handler-for-device-ATS-support.patch [RHEL-184675]
  - kvm-vfio-pci-Add-ats-property.patch [RHEL-184675]
  - Resolves: RHEL-113894
    ([RHEL.10.2][virual network] Hit qemu coredump when removed an interface that the guest is using from the host)
  - Resolves: RHEL-111934
    (QEMU support for loading multiple sets of x509 certs for PQC hybrid mode)
  - Resolves: RHEL-184675
    (NVIDIA:Backport vfio/pci: add vfio-pci ATS control property - RHEL 10.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-25
changelog:
  - kvm-hw-core-platform-bus-guard-platform_bus_get_mmio_add.patch [RHEL-180837]
  - kvm-hw-tpm-gate-PPI-support-on-tpm-tis-device-behind-a-d.patch [RHEL-180837]
  - kvm-hw-tpm-default-tpm-tis-device-PPI-to-disabled.patch [RHEL-180837]
  - kvm-s390x-css-limit-number-of-CHPIDs-in-description.patch [RHEL-192791]
  - kvm-s390x-ioinst-Require-strict-length-and-format-for-SE.patch [RHEL-192791]
  - kvm-s390x-pci-Shrink-RPCIT-ranges-to-registered-window.patch [RHEL-192791]
  - kvm-s390x-pci-Tighten-region-detection-for-BAR-read-writ.patch [RHEL-192791]
  - kvm-s390x-sclp-reject-invalid-write-event-data-headers.patch [RHEL-192791]
  - kvm-s390x-kvm-clamp-stsi-3.2.2-size.patch [RHEL-192791]
  - kvm-s390x-sclp-prevent-re-reading-the-sclp-header.patch [RHEL-192791]
  - kvm-s390x-sclpcpi-check-event-length-field-before-readin.patch [RHEL-192791]
  - kvm-s390x-css-firm-up-handling-of-chained-TIC-CCWs.patch [RHEL-192791]
  - Resolves: RHEL-180837
    ([aarch64] Live migration of TPM-equipped guests fails: Unknown ramblock "tpm-ppi" (qemu-kvm-10.1.0-19.el10 → older builds))
  - Resolves: RHEL-192791
    (RHEL10.0 - qemu s390x: interface harding fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-26
changelog:
  - kvm-vfio-region-Clarify-dma-buf-failure-messages.patch [RHEL-224652]
  - Resolves: RHEL-224652
    (Backport  vfio/region: Clarify dma-buf failure messages )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-27
changelog:
  - kvm-pc-bios-s390-ccw-Always-reset-virtio-device-on-faile.patch [RHEL-151317]
  - Resolves: RHEL-151317
    (RHEL10 - KVM full Boot order support -- Guest is crashing for the invalid boot device(<boot order='1'/> -- add-on qcow2 file))


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-28
changelog:
  - kvm-system-memory-Use-memmove-for-directly-accessible-re.patch [RHEL-246035]
  - kvm-system-memory-Use-qemu_ram_move-for-directly-accessi.patch [RHEL-246035]
  - kvm-system-memory-Make-ram-device-region-directly-access.patch [RHEL-246035]
  - Resolves: RHEL-246035
    ([RHEL10.3] Exhausted DMA bounce buffer on building cuda-samples in VM)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Tyonnchie Berry <tyberry@redhat.com> - 2.8-5
changelog:
  - Added patch Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch sched_attr-Do-not-define-for-glibc-2.41.patch
  Resolves: RHEL-88470


author: Tyonnchie Berry <tyberry@redhat.com> - 2.9-1
changelog:
  - Rebased to latest upstream version
  - Dropped previously applied patches
  - Cleaned up spec file
  Resolves: RHEL-86705


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase realtime-tests to the latest upstream
  - Added 3 patches and updated spec file
  Resolves: RHEL-144701


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-10
changelog:
  - skip btrfs subvolumes when detecting ESP partitions
  - fix booting on UEFI systems with multiple CDROM devices
  - fix copying of console kernel cmdline parameters
  - Use git to apply patches in %prep
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!):
    - Backport PR 3250 to fix useless warning that libsystemd-core requires
      additional libraries and ReaR recovery system needs additional libraries
    - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs://
      BACKUP/OUTPUT_URL
  - fix backup of btrfs subvolumes


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-11
changelog:
  - Generate /etc/rear/os.conf during build again, it is better than generating it
    in %post, but do not mark it as config file to allow it to be updated during
    package upgrade and avoid containing an old OS version information


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-3
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-5
changelog:
  - fix support for PowerNV machines without PPC PReP partitions (RHEL-134218)
  - fix duplicate execution of automated recovery (RHEL-110659)
  - fix sorting of stage scripts (RHEL-132181)
  - add support for dbus-broker (RHEL-134213)


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-6
changelog:
  - fix EXCLUDE_COMPONENTS being ignored for partition tables unsupported by ReaR
  - mark ISO filesystem labels as write protected
  - fix lftp command to pass options prior to opening the URL
  - add REAR_INITRD_OVERLAY to split initramfs into core + SquashFS overlay
  - fix unsuccessful unmout of rescue ESP that might result in a corrupted rescue USB


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Tomas Popela <tpopela@redhat,com> - 0.1-4
changelog:
  - Migrate to the new flatpak preinstall config format
  - Add collection id to rhel registry config file and reference it from
    preinstall config files
  - Use org.mozilla.Firefox (and not firefox) which is in RHEL


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 284-1
changelog:
  - Use --config=xxx for clang configs instead of two separate arguments to work
    around a bug in meson
  - Add clang link config file


author: Michal Domonkos <mdomonko@redhat.com> - 290-1
changelog:
  - Use upstream versions of find-provides/requires (RHEL-39760)
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-84703)


author: Milan Crha <mcrha@redhat.com> - 0.9.1-12
changelog:
  - Add patch for CVE-2026-16615 (Weak random number generation in PKCE implementation)
    Resolves: RHEL-213751


author: mjcr99 <macano@redhat.com> - 1:0.3.9-1
changelog:
  - Update rhc to 0.3.9
  - Resolves: RHEL-174319
  - Resolves: RHEL-174314
  - Resolves: RHEL-153860
  - Resolves: RHEL-138740


author: pkoprda <pkoprda@redhat.com> - 1.0.0-2
changelog:
  - rhc-playbook-verifier-v1.0.0-2
  - Removes rhc-playbook-signer subpackage from .spec file
  - Resolves: RHEL-115794


author: Rich Megginson <rmeggins@redhat.com> - 1.118.0-0.1
changelog:
  - Resolves: RHEL-122052 : Templates in some role license files
  - Resolves: RHEL-120413 : ha_cluster - ha_cluster role does not work in container builds
  - Resolves: RHEL-136607 : metrics - [RFE] configure TLS certificates in grafana using the metrics system role
  - Resolves: RHEL-138277 : ssh - feat: Add new configuration option VersionAddendum
  - Resolves: RHEL-144495 : sshd - feat: New OpenSSH configuration option GSSAPIDelegateCredentials
  - Resolves: RHEL-137261 : storage - in _get_device_id IndexError: list index out of range
  - All roles support INJECT_FACTS_AS_VARS=false
  - metrics - test: do not restore service if final state not-found
  - sshd - feat: Add systemd ephemeral authorized_keys to the instantiated service file on Fedora
  - storage - fix: add vdo package for Fedora OSTree


author: Rich Megginson <rmeggins@redhat.com> - 1.118.0-0.2
changelog:
  - Resolves: RHEL-122052 : Templates in some role license files
  - Fix ansible-test issue with community.general.ini_file module 11.4.4 in documentation string


author: Rich Megginson <rmeggins@redhat.com> - 1.119.0-0.1
changelog:
  - Resolves: RHEL-144914 : postgresql - add PostgreSQL 18
  - fix upstream shellcheck issue in nbde_client role


author: Rich Megginson <rmeggins@redhat.com> - 1.119.1-0.0.1
changelog:
  - Resolves: RHEL-144914 : postgresql - add PostgreSQL 18 - fixes test issue
  - Resolves: RHEL-135522 : snapshot - Snapshot role ignores snapshot_lvm_bootable: true setting when creating a snapset
  - Resolves: RHEL-123523 : storage -  ZeroDivisionError when creating LVM volume without size specification


author: Rich Megginson <rmeggins@redhat.com> - 1.120.1-0.1
changelog:
  - Resolves: RHEL-145214 : selinux - Missing proto 'sctp' and 'dccp'
  - Resolves: RHEL-145219 : vpn - [ERROR]: Task failed: object of type 'dict' has no attribute '1.1.1.1'


author: Rich Megginson <rmeggins@redhat.com> - 1.120.2-0.1
changelog:
  - Resolves: RHEL-145214 : selinux - Missing proto 'sctp' and 'dccp'
  - timesync - fix: use ansible_facts timesync_ntp_provider_current


author: Rich Megginson <rmeggins@redhat.com> - 1.120.3-0.1
changelog:
  - Resolves: RHEL-150780 : firewall - fix: el7 interface functionality requires NetworkManager
  - Resolves: RHEL-145247 : selinux - [v 1.10.4] Prepare module installation -> "Template error: object of type 'dict' has no attribute 'path'"
  - ha_cluster - fix: ostree - add dnf/dnf5 package, add firewall packages
  - metrics - test: ostree - add package pcp-pmda-apache, role certificate
  - systemd - test: ostree requires cronie package for testing


author: Rich Megginson <rmeggins@redhat.com> - 1.120.4-0.1
changelog:
  - Resolves: RHEL-150780 : firewall - fix: el7 interface functionality requires NetworkManager
  - firewall - test: ensure interface chosen is managed by NetworkManager


author: Rich Megginson <rmeggins@redhat.com> - 1.125.1-0.1
changelog:
  - Added syslog fingerprinting to all roles
  - Change verbosity level 3 for no_log to use verbosity-based logging in all roles
  - Resolves: RHEL-175649 : allow disable of secure logging in system roles for debugging
  - Resolves: RHEL-175668 : auditd - auditd system role [rhel-10]
  - Resolves: RHEL-119732 : firewall - RFE: firewall system role not idempotent when using "previous: replaced"
  - Resolves: RHEL-46232 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export fencing levels configuration
  - Resolves: RHEL-46231 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export node attributes and utilization configuration
  - Resolves: RHEL-111546 : kernel_settings - The kernel_settings role is not idempotent on el7
  - Resolves: RHEL-175663 : snapshot - feat: add list command to report the status of LVM snapshots for specified VGs/LVs
  - Resolves: RHEL-175616 : trustee_client - new system role
  - Resolves: RHEL-175617 : trustee_server - new system role


author: Rich Megginson <rmeggins@redhat.com> - 1.127.2-0.1
changelog:
  - Resolves: RHEL-180603 : bootloader - fix: support duplicate option names with different values
  - Resolves: RHEL-116287 : crypto_policies - [RFE] redhat.rhel_system_roles.crypto_policies add option to reapply policy when .pmod file is changed
  - Resolves: RHEL-184522 : firewall - fix: role should not configure firewall if only getting facts
  - Resolves: RHEL-189406 : firewall - fix: ensure rich rule handling is idempotent
  - Resolves: RHEL-189401 : nbde_server - fix: Prevent symlink following privilege escalation in nbde_server_tang module
  - Resolves: RHEL-157025 : network - Inverted retry condition in SysUtil.link_infos() makes retry loop ineffective
  - Resolves: RHEL-145224 : podman - Restart quadlet when mounted host files changed the state
  - Resolves: RHEL-182466 : selinux - fix: ensure policy modules are loaded before they can be referenced
  - Resolves: RHEL-110005 : snapshot - explain in README how to use the extend feature
  - Resolves: RHEL-167857 : sshd - feat: Add new c10s options GSSAPIAllowS4U2Self and GSSAPIProxyS4U2Services
  - Resolves: RHEL-127989 : storage - [RFE] The storage system role should only install stratis when it's needed
  - Resolves: RHEL-178505 : sudo - Space missing in sudoers.j2 template before tags
  - Resolves: RHEL-178496 : sudo - Small fix for line continuation characters
  - Remove plans directory from roles
    It contains unnecessary fmf plans that had been added by
    https://github.com/linux-system-roles/.github/pull/85


author: Rich Megginson <rmeggins@redhat.com> - 2.0.0-0.1
changelog:
  - Resolves: RHEL-180860 : bootloader - Role ignores check mode / files changed in check mode
  - Resolves: RHEL-210975 : bootloader - [RFE]  Provide an option to disable timeout management in redhat.rhel_system_roles.bootloader
  - Resolves: RHEL-210677 : certificate - feat: manage system certificate trust, CA certificates
  - Resolves: RHEL-186087 : nbde_client role should use hostonly_cmdline=yes on EL10 and later
  - Resolves: RHEL-208708 : nbde_client - add support for static networking with IP configuration
  - Resolves: RHEL-212676 : podman - Prune images on ansible run
  - Resolves: RHEL-191865 : podman - Support for multiple kubernetes objects in `podman_kube_specs` `kube_file_content`
  - Resolves: RHEL-212671 : podman - `podman_run_as_user` is required to be set when running this role as non-root user
  - Resolves: RHEL-212146 : snapshot - feat: add support for revertable snapshots with boot-time rollback capability
  - Resolves: RHEL-145208 : timesync - Support key and keyfile for authentication


author: Rich Megginson <rmeggins@redhat.com> - 2.4.0-0.1
changelog:
  - Resolves: RHEL-220559 : certificate - feat: Implement support for passing an issuer argument to the provider.
  - Resolves: RHEL-220564 : certificate - Certificate renewal every time the role runs for IPA
  - Resolves: RHEL-213795 : fapolicyd - [RFE] - Manage trusted directories with fapolicyd RHEL System Role
  - Write roles fingerprints to /var/log/sysroles.jsonl


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


